Community discussions

MikroTik App
 
rootwilliamson
just joined
Topic Author
Posts: 3
Joined: Thu Nov 07, 2019 10:02 am

Which VPN protocol is best?

Thu Nov 07, 2019 10:06 am

I am fresh vpn user and basically I use pptp protocol for streaming. On last weekend with my friends, I was using Facebook from my smartphone. In a while my smartphone is going hacked and all data that already stored in my phone was too. At that time, I said “What the fuck is this” but one of my friend suggest me to don’t use PPTP because it has zero level security.

Now, I have 3 different protocols option like l2tp, ikev2 and openvpn. Can anyone guide me which one is best for all purposes.

Thank You
 
User avatar
grusu
Member Candidate
Member Candidate
Posts: 125
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: Which VPN protocol is best?

Thu Nov 07, 2019 10:22 am

You can use l2tp / ipsec which is quite secure and works on all platforms.
If you have a hardware accelerator router then it is even better:
https://wiki.mikrotik.com/wiki/Manual:I ... celeration
 
rootwilliamson
just joined
Topic Author
Posts: 3
Joined: Thu Nov 07, 2019 10:02 am

Re: Which VPN protocol is best?

Thu Nov 07, 2019 12:49 pm

But l2tp uses IPsec for data encryption. Recently I read some comparison guide on SSL and IPsec

So, what do you think l2tp/ipsec is much better than openvpn.
Last edited by rootwilliamson on Tue Sep 15, 2020 3:15 pm, edited 1 time in total.
 
User avatar
grusu
Member Candidate
Member Candidate
Posts: 125
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: Which VPN protocol is best?

Fri Nov 08, 2019 8:36 pm

I did not say that ipsec / l2tp is generally better than openvpn but that, in the case of a mikrotik router, it is a better choice.
The implementation of openvpn on the routeros does not support udp and therefore it is not so fast.
 
pe1chl
Forum Guru
Forum Guru
Posts: 7476
Joined: Mon Jun 08, 2015 12:09 pm

Re: Which VPN protocol is best?

Fri Nov 08, 2019 9:34 pm

Completely aside from the selection of a "best VPN", please note that your original problem has absolutely nothing to do with the security of your VPN.
It is highly unlikely that someone, even when they have cracked your VPN, would be able to attack your smartphone from the outside.
Much more likely is that you visited content that infected your phone because it was not updated recently and it has a security issue.
Instead of focussing on changing your VPN, it is more advisable to re-install the phone and update it to the most recent state, and when there are no recent updates replace the phone.
 
Zacharias
Forum Guru
Forum Guru
Posts: 2359
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Which VPN protocol is best?

Fri Nov 08, 2019 9:56 pm

I agree with pe1chl.
Also yes do not use pptp, instead use L2TP/IPsec...
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 24877
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Which VPN protocol is best?

Tue Nov 12, 2019 1:55 pm

IPsec supports hardware acceleration in MikroTik devices and is very secure as well.
No answer to your question? How to write posts
 
bestazy
just joined
Posts: 2
Joined: Thu Jan 04, 2018 1:11 pm

Re: Which VPN protocol is best?

Sat Nov 23, 2019 9:07 pm

PPTP should not be used anymore. Even Microsoft (which designed the protocol) has advised against using it.
One protocol which has not been mentioned is 'OpenConnect', which is quite simple to set up (you just need to make the keys and to edit a simple .conf file), but after that just works and OpenConnect works fast.
OpenConnect works fine on all OS and mobile platforms. OpenConnect was initially set up by Cisco (the makers of high quality routers), called 'AnyConnect' in Cisco-speak.

https://en.wikipedia.org/wiki/OpenConnect
 
Zacharias
Forum Guru
Forum Guru
Posts: 2359
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Which VPN protocol is best?

Sat Nov 23, 2019 9:41 pm

Openconnect is not supported by Mikrotik devices.
 
LeonaFayre
just joined
Posts: 2
Joined: Mon Nov 25, 2019 12:05 pm

Re: Which VPN protocol is best?

Fri Nov 29, 2019 11:44 am

As your best options I would recommend OpenVPN, IKEv2/IPSec, and SoftEther.
 
shrekkd
just joined
Posts: 5
Joined: Wed Nov 06, 2019 12:33 pm

Re: Which VPN protocol is best?

Wed Dec 18, 2019 1:25 pm

Right now. OpenVPN is the most secure VPN protocol in the industry. It uses TCP and UDP for transmission.
 
th0massin0
Member Candidate
Member Candidate
Posts: 148
Joined: Sun May 11, 2014 4:16 am
Location: Poland

Re: Which VPN protocol is best?

Wed Dec 18, 2019 3:59 pm

Right now. OpenVPN is the most secure VPN protocol in the industry. It uses TCP and UDP for transmission.
How did you test that?
 
ClayJohnson57
just joined
Posts: 1
Joined: Wed Feb 26, 2020 1:36 pm
Contact:

Re: Which VPN protocol is best?

Wed Feb 26, 2020 1:57 pm

I will suggest you to use either l2tp or ipsec because these 2 protocols are the safe and mostly work on major platforms.
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 2159
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Which VPN protocol is best?

Wed Apr 08, 2020 12:46 pm

If I understand correctly, OpenVPN needs a third party client to work on Windows. L2TP/IPSec works fine on all my client types (Windows/Linux/Android/iPhone ++), so that is what I do use. There are also a nice view in my Splunk project that do show logs from the L2TP/IPSec logins. See my signature.
VPN.jpg
You do not have the required permissions to view the files attached to this post.
 
Try Splunk> to monitor your MikroTik Router(s). Look at this page in how to set it up.

MikroTik->Splunk
 
 
man20820
just joined
Posts: 2
Joined: Tue Oct 31, 2017 5:41 pm

Re: Which VPN protocol is best?

Sun Nov 01, 2020 5:14 am

how about wireguard? viewtopic.php?f=1&t=165248
 
jkyawesome
just joined
Posts: 22
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Fri Dec 04, 2020 4:52 am

why no love for openconnect?
 
alice007
just joined
Posts: 1
Joined: Wed Feb 03, 2021 1:42 pm

Re: Which VPN protocol is best?

Wed Feb 03, 2021 1:48 pm

I lived in Dubai and here a lot of sites is a band and I don't find and good VPN and here is something have the uae vpn law which I don't have any clue if anyone has any information pls suggest me.
 
jkyawesome
just joined
Posts: 22
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Wed Mar 31, 2021 2:40 am

I do not understand why Mikrotik does not support openconnect. I think it is a hate Cisco thing. I wish vendors could keep politics out of their software.
 
Robertemma081
just joined
Posts: 3
Joined: Tue Apr 20, 2021 10:34 am

Re: Which VPN protocol is best?

Thu Apr 22, 2021 9:20 am

I would recommend Ivacy Vpn. Its the best one in the market currently in terms of price and security.
 
User avatar
BergDev
just joined
Posts: 14
Joined: Thu Mar 05, 2020 4:27 pm
Location: Russia

Re: Which VPN protocol is best?

Sat May 08, 2021 10:00 am

Each VPN is needed for its own tasks, there are providers that break through ipsec and l2tp, then we give the client SSTP. You need a secure channel for mgmt traffic, then you can take openvpn, although slow, PPTP itself is outdated and its use is considered not secure, I personally use ipsec ike2 with certificates.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 7310
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Sun May 16, 2021 3:57 pm

Its two flavours
.
Real (two way) VPN - where you control both endpoints or where both endpoints are trusted.
Work ( worksite to worksite, work laptop to worksite)
Home ( home to home, laptop to home etc.)
In which case Wireguard is friggin fast.

Fake (one way) VPN - where you only control one endpoint and put your trust into a THIRD PARTY provider, with no ability to 100% know if your data is being mined. If I was within agencies, I would be sure to have backdoors to all 3 party providers in my country (by law or by force) or own them outright. So think carefully where your third party provider is located. It doesnt have to be govt, it can be criminal enterprises owning these sites and selling your information.

Just a theory, I have no proof, but am naturally skeptical.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!
 
User avatar
mozerd
Long time Member
Long time Member
Posts: 509
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: Which VPN protocol is best?

Sun May 16, 2021 5:09 pm

If you are subscribing to a vpn service then use ike2 or WireGuard.

If you are using a MikroTik router at home and running RoS v 6.4x then use ike2
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 7310
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Wed May 19, 2021 7:25 pm

HI Mozerd I set up a WG tunnel between two MT devices, an RB450Gx5 (server) behind my CCR1009 and at the other end a BELL HH3000 in front of an RB4011 (client).
Works amazingly well. Keep alive works as the tunnel keeps chugging away.
For simplicity its certainly worth considering.
My next task is to see if I can add my iphone as a wireguard clent as well.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!
 
User avatar
mozerd
Long time Member
Long time Member
Posts: 509
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: Which VPN protocol is best?

Wed May 19, 2021 8:36 pm

I set up a WG tunnel between two MT devices, an RB450Gx5 (server) behind my CCR1009 and at the other end a BELL HH3000 in front of an RB4011 (client).
My next task is to see if I can add my iphone as a wireguard clent as well.
hi Anav

On Tik devices WireGuard only works if RoS v7.xbeta is used ….. so I assume that is what you are doing … Yes works really well and very easy to implement PLUS very secure. WG has iPhone driver [client] that you can use … also works very nicely.
 
Conved
just joined
Posts: 1
Joined: Thu May 27, 2021 10:41 pm

Re: Which VPN protocol is best?

Thu May 27, 2021 10:46 pm

I have been using ipsec for several years now and did not notice any problems. Believe that the reliability has already been justified over the years of use.
 
jkyawesome
just joined
Posts: 22
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Mon May 31, 2021 2:24 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
 
pe1chl
Forum Guru
Forum Guru
Posts: 7476
Joined: Mon Jun 08, 2015 12:09 pm

Re: Which VPN protocol is best?

Mon May 31, 2021 10:30 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
First it was OpenVPN. Then it was Wireguard. Now it is OpenConnect. You people will NEVER be satisfied with ANY VPN technology!!!
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 7310
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Fri Jun 04, 2021 3:21 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
First it was OpenVPN. Then it was Wireguard. Now it is OpenConnect. You people will NEVER be satisfied with ANY VPN technology!!!
Belchi, there can only be one!!!!! (wireguard).

@mozerd, my iphone can now configure the RBG Server behind the CCR1009, AND the CCR1009. Wait for it................ AND the client side router an RB4011. So sweet.
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!
 
User avatar
erkexzcx
Member Candidate
Member Candidate
Posts: 204
Joined: Mon Oct 07, 2019 11:42 pm

Re: Which VPN protocol is best?

Fri Jun 04, 2021 11:44 pm

Let me introduce IPSEC/IKE2 protocol to the VPN zoo... :D Let's see what VPN companies say about IPSEC/IKE2?
AES with 256-bit keys, which is recommended by the NSA for securing classified information, including the TOP SECRET level.

BOOM, clear winner.
Linux <3
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 7310
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Sun Jun 13, 2021 4:04 pm

NSA approval = they can can crack it you silly bird. SO YESTERDAY!!!
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
MTUNA Certified, by the Ascerbic Llama!

Who is online

Users browsing this forum: No registered users and 6 guests