====== Mikrotik VPN Notes ======

See also **[[https://virtualarchitects.com/wiki/doku.php?do=search&id=mikrotik|other Mikrotik pages in this wiki]]**

**Greg Sowell's VPN Training Video**: http://gregsowell.com/?p=1290

**Some user written examples**: http://wiki.mikrotik.com/wiki/Tunnels

**Certificates**: http://wiki.mikrotik.com/wiki/Manual:Create_Certificates

:!: VPNs will ideally run over UDP.  Running a connection-oriented VPN protocol over the top of connection-oriented TCP is less than ideal and resultant VPNs will always be slower than if run over UDP.

:!: The Mikrotik OpenVPN implementation does not support UDP.  Many consider it 'broken'.

Supported VPN Technologies:

  * **Wireguard**
    * RouterOS v7
    * https://www.wireguard.com/
    * https://www.youtube.com/watch?v=P6f8Qc4EItc
  * **IPSec**
    * [[networking:router:mikrotik_vpn_ipsec|Site to Site]]
  * **OpenVPN**
    * [[http://wiki.mikrotik.com/wiki/OpenVPN|From the wiki]]
  * **PPTP**
    * [[networking:router:mikrotik_vpn_pptp|PPTP VPN]]
    * ALL traffic passes through tunnel
    * Easy - All Windows and most other platforms
    * Road Warrior
    * http://networkingforintegrators.com/2012/08/how-to-vpn/
    * http://www.strawberry-network.com/setting-up-vpn-using-mikrotik-router-pptp/
    * http://blog.butchevans.com/2008/09/mikrotik_routeros_transparent_bridge_pptp_eoip/
  * **L2TP**
    * http://gregsowell.com/?p=4389
    * https://www.youtube.com/watch?v=tpgEqzwj_OQ
  * **EoIP**
    * Ethernet over IP
    * Like a bridge across a WAN or Internet
    * Layer 2
    * Router doesn't need to undertand traffic or protocols
    * http://www.lockergnome.com/it/2011/08/30/eoip-ethernet-over-ip-2/
    * http://www.youtube.com/watch?v=Sj8I7J3J0Ek
    * http://jhenry6.blogspot.com/2013/03/transparent-lan-services-with-eoip-and.html
  * **SSTP**
    * TLS Encryption
    * Port 443
    * PPP link over encrypted tunnel
    * http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP
    * **Howto**: https://www.dr0u.com/mikrotik-setup-sstp-server-for-windows-10-client/