Community discussions

MikroTik App
 
rootwilliamson
just joined
Topic Author
Posts: 3
Joined: Thu Nov 07, 2019 10:02 am

Which VPN protocol is best?

Thu Nov 07, 2019 10:06 am

I am fresh vpn user and basically I use pptp protocol for streaming. On last weekend with my friends, I was using Facebook from my smartphone. In a while my smartphone is going hacked and all data that already stored in my phone was too. At that time, I said “What the fuck is this” but one of my friend suggest me to don’t use PPTP because it has zero level security.

Now, I have 3 different protocols option like l2tp, ikev2 and openvpn. Can anyone guide me which one is best for all purposes.

Thank You
 
User avatar
grusu
Member Candidate
Member Candidate
Posts: 129
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: Which VPN protocol is best?

Thu Nov 07, 2019 10:22 am

You can use l2tp / ipsec which is quite secure and works on all platforms.
If you have a hardware accelerator router then it is even better:
https://wiki.mikrotik.com/wiki/Manual:I ... celeration
 
rootwilliamson
just joined
Topic Author
Posts: 3
Joined: Thu Nov 07, 2019 10:02 am

Re: Which VPN protocol is best?

Thu Nov 07, 2019 12:49 pm

But l2tp uses IPsec for data encryption. Recently I read some comparison guide on SSL and IPsec

So, what do you think l2tp/ipsec is much better than openvpn.
Last edited by rootwilliamson on Tue Sep 15, 2020 3:15 pm, edited 1 time in total.
 
User avatar
grusu
Member Candidate
Member Candidate
Posts: 129
Joined: Tue Aug 13, 2013 7:35 am
Location: Bucharest, Romania

Re: Which VPN protocol is best?

Fri Nov 08, 2019 8:36 pm

I did not say that ipsec / l2tp is generally better than openvpn but that, in the case of a mikrotik router, it is a better choice.
The implementation of openvpn on the routeros does not support udp and therefore it is not so fast.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: Which VPN protocol is best?

Fri Nov 08, 2019 9:34 pm

Completely aside from the selection of a "best VPN", please note that your original problem has absolutely nothing to do with the security of your VPN.
It is highly unlikely that someone, even when they have cracked your VPN, would be able to attack your smartphone from the outside.
Much more likely is that you visited content that infected your phone because it was not updated recently and it has a security issue.
Instead of focussing on changing your VPN, it is more advisable to re-install the phone and update it to the most recent state, and when there are no recent updates replace the phone.
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Which VPN protocol is best?

Fri Nov 08, 2019 9:56 pm

I agree with pe1chl.
Also yes do not use pptp, instead use L2TP/IPsec...
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26287
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia

Re: Which VPN protocol is best?

Tue Nov 12, 2019 1:55 pm

IPsec supports hardware acceleration in MikroTik devices and is very secure as well.
 
bestazy
just joined
Posts: 2
Joined: Thu Jan 04, 2018 1:11 pm

Re: Which VPN protocol is best?

Sat Nov 23, 2019 9:07 pm

PPTP should not be used anymore. Even Microsoft (which designed the protocol) has advised against using it.
One protocol which has not been mentioned is 'OpenConnect', which is quite simple to set up (you just need to make the keys and to edit a simple .conf file), but after that just works and OpenConnect works fast.
OpenConnect works fine on all OS and mobile platforms. OpenConnect was initially set up by Cisco (the makers of high quality routers), called 'AnyConnect' in Cisco-speak.

https://en.wikipedia.org/wiki/OpenConnect
 
Zacharias
Forum Guru
Forum Guru
Posts: 3459
Joined: Tue Dec 12, 2017 12:58 am
Location: Greece

Re: Which VPN protocol is best?

Sat Nov 23, 2019 9:41 pm

Openconnect is not supported by Mikrotik devices.
 
LeonaFayre
just joined
Posts: 2
Joined: Mon Nov 25, 2019 12:05 pm

Re: Which VPN protocol is best?

Fri Nov 29, 2019 11:44 am

As your best options I would recommend OpenVPN, IKEv2/IPSec, and SoftEther.
 
shrekkd
just joined
Posts: 5
Joined: Wed Nov 06, 2019 12:33 pm

Re: Which VPN protocol is best?

Wed Dec 18, 2019 1:25 pm

Right now. OpenVPN is the most secure VPN protocol in the industry. It uses TCP and UDP for transmission.
 
th0massin0
Member Candidate
Member Candidate
Posts: 156
Joined: Sun May 11, 2014 4:16 am
Location: Poland

Re: Which VPN protocol is best?

Wed Dec 18, 2019 3:59 pm

Right now. OpenVPN is the most secure VPN protocol in the industry. It uses TCP and UDP for transmission.
How did you test that?
 
User avatar
Jotne
Forum Guru
Forum Guru
Posts: 3279
Joined: Sat Dec 24, 2016 11:17 am
Location: Magrathean

Re: Which VPN protocol is best?

Wed Apr 08, 2020 12:46 pm

If I understand correctly, OpenVPN needs a third party client to work on Windows. L2TP/IPSec works fine on all my client types (Windows/Linux/Android/iPhone ++), so that is what I do use. There are also a nice view in my Splunk project that do show logs from the L2TP/IPSec logins. See my signature.
VPN.jpg
You do not have the required permissions to view the files attached to this post.
 
User avatar
man20820
just joined
Posts: 4
Joined: Tue Oct 31, 2017 5:41 pm

Re: Which VPN protocol is best?

Sun Nov 01, 2020 5:14 am

how about wireguard? viewtopic.php?f=1&t=165248
 
jkyawesome
newbie
Posts: 28
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Fri Dec 04, 2020 4:52 am

why no love for openconnect?
 
alice007
just joined
Posts: 1
Joined: Wed Feb 03, 2021 1:42 pm

Re: Which VPN protocol is best?

Wed Feb 03, 2021 1:48 pm

I lived in Dubai and here a lot of sites is a band and I don't find and good VPN and here is something have the uae vpn law which I don't have any clue if anyone has any information pls suggest me.
 
jkyawesome
newbie
Posts: 28
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Wed Mar 31, 2021 2:40 am

I do not understand why Mikrotik does not support openconnect. I think it is a hate Cisco thing. I wish vendors could keep politics out of their software.
 
User avatar
BergDev
just joined
Posts: 14
Joined: Thu Mar 05, 2020 4:27 pm
Location: Russia

Re: Which VPN protocol is best?

Sat May 08, 2021 10:00 am

Each VPN is needed for its own tasks, there are providers that break through ipsec and l2tp, then we give the client SSTP. You need a secure channel for mgmt traffic, then you can take openvpn, although slow, PPTP itself is outdated and its use is considered not secure, I personally use ipsec ike2 with certificates.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Sun May 16, 2021 3:57 pm

Its two flavours
.
Real (two way) VPN - where you control both endpoints or where both endpoints are trusted.
Work ( worksite to worksite, work laptop to worksite)
Home ( home to home, laptop to home etc.)
In which case Wireguard is friggin fast.

Fake (one way) VPN - where you only control one endpoint and put your trust into a THIRD PARTY provider, with no ability to 100% know if your data is being mined. If I was within agencies, I would be sure to have backdoors to all 3 party providers in my country (by law or by force) or own them outright. So think carefully where your third party provider is located. It doesnt have to be govt, it can be criminal enterprises owning these sites and selling your information.

Just a theory, I have no proof, but am naturally skeptical.
 
User avatar
mozerd
Forum Veteran
Forum Veteran
Posts: 871
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: Which VPN protocol is best?

Sun May 16, 2021 5:09 pm

If you are subscribing to a vpn service then use ike2 or WireGuard.

If you are using a MikroTik router at home and running RoS v 6.4x then use ike2
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Wed May 19, 2021 7:25 pm

HI Mozerd I set up a WG tunnel between two MT devices, an RB450Gx5 (server) behind my CCR1009 and at the other end a BELL HH3000 in front of an RB4011 (client).
Works amazingly well. Keep alive works as the tunnel keeps chugging away.
For simplicity its certainly worth considering.
My next task is to see if I can add my iphone as a wireguard clent as well.
 
User avatar
mozerd
Forum Veteran
Forum Veteran
Posts: 871
Joined: Thu Oct 05, 2017 3:39 pm
Location: Canada
Contact:

Re: Which VPN protocol is best?

Wed May 19, 2021 8:36 pm

I set up a WG tunnel between two MT devices, an RB450Gx5 (server) behind my CCR1009 and at the other end a BELL HH3000 in front of an RB4011 (client).
My next task is to see if I can add my iphone as a wireguard clent as well.
hi Anav

On Tik devices WireGuard only works if RoS v7.xbeta is used ….. so I assume that is what you are doing … Yes works really well and very easy to implement PLUS very secure. WG has iPhone driver [client] that you can use … also works very nicely.
 
jkyawesome
newbie
Posts: 28
Joined: Mon Sep 17, 2018 12:34 am

Re: Which VPN protocol is best?

Mon May 31, 2021 2:24 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
 
pe1chl
Forum Guru
Forum Guru
Posts: 10183
Joined: Mon Jun 08, 2015 12:09 pm

Re: Which VPN protocol is best?

Mon May 31, 2021 10:30 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
First it was OpenVPN. Then it was Wireguard. Now it is OpenConnect. You people will NEVER be satisfied with ANY VPN technology!!!
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Fri Jun 04, 2021 3:21 am

OpenConnect would be a great addition to Mikrotik. Mikrotik should support all VPN protocols without regard to which network religion originally developed the VPN.
First it was OpenVPN. Then it was Wireguard. Now it is OpenConnect. You people will NEVER be satisfied with ANY VPN technology!!!
Belchi, there can only be one!!!!! (wireguard).

@mozerd, my iphone can now configure the RBG Server behind the CCR1009, AND the CCR1009. Wait for it................ AND the client side router an RB4011. So sweet.
 
User avatar
erkexzcx
Member Candidate
Member Candidate
Posts: 263
Joined: Mon Oct 07, 2019 11:42 pm

Re: Which VPN protocol is best?

Fri Jun 04, 2021 11:44 pm

Let me introduce IPSEC/IKE2 protocol to the VPN zoo... :D Let's see what VPN companies say about IPSEC/IKE2?
AES with 256-bit keys, which is recommended by the NSA for securing classified information, including the TOP SECRET level.

BOOM, clear winner.
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18959
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Which VPN protocol is best?

Sun Jun 13, 2021 4:04 pm

NSA approval = they can can crack it you silly bird. SO YESTERDAY!!!
 
alreyami
just joined
Posts: 1
Joined: Mon Oct 03, 2022 3:12 pm

Re: Which VPN protocol is best?

Mon Oct 03, 2022 3:18 pm

Been living here in Dubai for almost 2 years now and there are certain VPN laws in the UAE that might get one in trouble.
 
User avatar
antosusan
just joined
Posts: 11
Joined: Mon Apr 03, 2023 7:37 am
Location: Indonesia

Re: Which VPN protocol is best?

Tue Jun 06, 2023 5:58 am

how about wireguard? viewtopic.php?f=1&t=165248
nice bro

Who is online

Users browsing this forum: No registered users and 4 guests