• Router: Mikrotik hAP ac2

• RouterOS 6.42.2

• Dynamic DNS provider: Duck DNS

Hi, I think that you'll need access to that Dorm router, if that's the one who has the public IP, then you'll need to do some port-forwarding to your own Mikrotik.

Does the dorm router has uPNP enabled?

mmm yes you're right.. also I found a different way, but you'll need a L2TP or PPTP server on the other side.

Does the dorm router has uPNP enabled?

I don't know. Is there a way to know it without directly accessing the router?

One simple way is to run a torrent. If I'm not mistaken, uTorrent uses uPNP. Check the manual.
If it uses, then You will see it's connection status as green, and people will be able to download from You. To avoid legal problems don't use movie torrents. Linux Distros are great for this.

$ upnpc -l
upnpc : miniupnpc library test client. (c) 2005-2014 Thomas Bernard
Go to http://miniupnp.free.fr/ or http://miniupnp.tuxfamily.org/
for more information.
No IGD UPnP Device found on the network!

mmm yes you're right.. also I found a different way, but you'll need a L2TP or PPTP server on the other side.

Hi, I think that you’ll need an external server with a Public IP address on it, but it’s probable that this dorm router block any VPN packet. So can you test if this works:

http://www.superfreevpn.com

I'd guess that blocking VPN is unlikely, but even if there was some, there's always a way how to get around it. Without using anything fancy, SSTP or OpenVPN on port 443 (standard https) should be doable almost always.

@LastStarDust: You need public IP address somewhere. You connect to server from your router using VPN client (it's outgoing connection like any other, so it will most likely work) and then you can forward some port(s) to you via the established tunnel. You can e.g. buy VPS and configure it yourself, ask a more lucky friend who has public address at home (if they have well-enough configurable router/server), or there's probably even some dedicated service for this (but I don't know any).

If the VPN service doesn't support port forwarding, then yes, it's a problem. Because port forwarding is exactly what you need.

With the friend option, they don't need server, just a public address and configurable router (MikroTik preferred of course ) would be enough.

Or you can try to find some other service, I asked Google and so far I found portmap.io (uses OpenVPN) and ngrok.com (uses some custom client), which give one port even for free. The latter won't work directly with hAP for sure, and the former is likely to not work either (the most common OpenVPN config is incompatible with RouterOS). But it's not a problem if you have a RasPi in LAN, you can use it instead of hAP and once you get there, you have more than one way to get to other devices. I didn't test any of these services myself, but they should work.

It's simple. You need VPN server on friend's side, connect your router to it as client, and then forward some ports from their public address to you via the tunnel. Exact configuration depends on router. VPN can, in theory, be anything supported by RouterOS (PPTP, L2TP, SSTP, OpenVPN, IPSec).

It's simple. You need VPN server on friend's side, connect your router to it as client, and then forward some ports from their public address to you via the tunnel. Exact configuration depends on router. VPN can, in theory, be anything supported by RouterOS (PPTP, L2TP, SSTP, OpenVPN, IPSec).

I just checked the model of my friend's router. It is a Buffalo WSR-1166DHP3 (http://buffalo.jp/product/wireless-lan/ap/wsr-1166dhp3/).
It doesn't support VPN and as far as I know, it is not compatible with OpenWrt or any other open source firmware.
I have even reached an OpenWrt developer and he confirmed that it is not compatible.
Anyhow the router stock firmware supports port-forwarding and dynamic DNS.
So I thought about buying the cheapest router on the market that can act as a VPN server and connect it to one of the free ethernet ports of the Buffalo router. Or maybe even a Raspberry Pi zero could work.
For example, do you think that this would be compatible with MikroTik routerOS?
https://goo.gl/cGnkNr

I know some asus router support pptp, some newer model even have openvpn, but I don't know the performance, and I don't know if it can port forward to the vpn interface (I had some asus router, but I use them as AP only)

update:
just check one of my RT-AC86U with firmware 3.0.0.4.384.20942, it have pptp. openvpn, ipsec, and seems it can port forward to the vpn client, but I didn't test it as this router is on a remote site, sorry about that

I know some asus router support pptp, some newer model even have openvpn, but I don't know the performance, and I don't know if it can port forward to the vpn interface (I had some asus router, but I use them as AP only)

update:
just check one of my RT-AC86U with firmware 3.0.0.4.384.20942, it have pptp. openvpn, ipsec, and seems it can port forward to the vpn client, but I didn't test it as this router is on a remote site, sorry about that

I am sorry but the RT-AC86U is way above my budget. I don't want to substitute the router of my friend but only to attach a small and inexpensive device to it that can act as a VPN server.
Do you think that a Raspberry Pi zero with an ethernet adapter would do? I am leaning towards that configuration ...

• Router 1: MikroTik hAP ac² - VPN client

• Router 2: Buffalo WSR-1166DHP3 with VPN server running on a Raspberry Pi Zero (Raspbian)

• Distance: 30 km (19 mi)

• Download mean speed (both): 10+-5 Mbps

• Upload mean speed (both): 20+-5 Mbps

• Use of the VPN: access files and stream music and videos that are stored on the Router 1

• Notes: no need for security but need for speed

Sorry, I missed the first message. If you don't care about security, i.e. you only need to forward ports and what will go over them will use own encryption, I'd probably try bare L2TP without IPSec. But I won't tell you much about it, because I never tried to set it up on Linux. What I did do was OpenVPN (relatively easy, but RouterOS only support tcp, which is not ideal) or IPSec (not fun with NAT).

Experiment, it's fun! I planned to try it myself, but I don't know if I'll get to it. You don't need anything special, just some basic config, try asking your favourite search engine. Or you can start with OpenVPN, it might be simpler. Again, you're looking for basic config. Only thing to remember is that RouterOS doesn't support UDP and LZO, so you need TCP (which sometimes doesn't work very well, but as a start, why not; or since you don't have any high requirements, it might be good enough to keep).

     iptables --table nat --append POSTROUTING --jump MASQUERADE
     echo "net.ipv4.ip_forward = 1" | tee -a /etc/sysctl.conf
     echo "net.ipv4.conf.all.accept_redirects = 0" | tee -a /etc/sysctl.conf
     echo "net.ipv4.conf.all.send_redirects = 0" | tee -a /etc/sysctl.conf
     for vpn in /proc/sys/net/ipv4/conf/*; do echo 0 > $vpn/accept_redirects; echo 0 > $vpn/send_redirects; done

Are you sure it's not just the internet connection? And not only yours, it depends also on VPN server's connection. Specifically, both your download and upload through VPN are limited by whatever is slower on server (download or upload).

My friend, do you still need the VPN server with port forward?