I have a RB1100 which i need to get a WAN connection to from an ISP connected wirelessly over a distance of 2KM. I have line of site so i bought a pair of SXT's. The question i have is what would be the most appropriate method to provide a transparent link from the ISP to the RB1100. I need to secure the SXT's and also be able to access them with winbox from behind the RB1100.

So from what i understand i could use the following

EOIP over PPPTP (is this secure enough)?
MPLS VPLS
BCP over PPPTP
L2TP?

Any recommendations?

I'm assuming you are talking about securing the wireless link? Between the SXTs use 802.11n with NV2 and use a security key. Then use VPLS to provide layer 2 bridging. This setup will provide the least overhead.

http://wiki.mikrotik.com/wiki/Manual:Nv ... v2_network