Mikrotik VPN Notes

See also other Mikrotik pages in this wiki

Greg Sowell's VPN Training Video: http://gregsowell.com/?p=1290

Some user written examples: http://wiki.mikrotik.com/wiki/Tunnels

Certificates: http://wiki.mikrotik.com/wiki/Manual:Create_Certificates

VPNs will ideally run over UDP. Running a connection-oriented VPN protocol over the top of connection-oriented TCP is less than ideal and resultant VPNs will always be slower than if run over UDP.

The Mikrotik OpenVPN implementation does not support UDP. Many consider it 'broken'.

Supported VPN Technologies:

• Wireguard
  • RouterOS v7
  • https://www.wireguard.com/
  • https://www.youtube.com/watch?v=P6f8Qc4EItc
• IPSec
  • Site to Site
• OpenVPN
  • From the wiki
• PPTP
  • PPTP VPN
  • ALL traffic passes through tunnel
  • Easy - All Windows and most other platforms
  • Road Warrior
  • http://networkingforintegrators.com/2012/08/how-to-vpn/
  • http://www.strawberry-network.com/setting-up-vpn-using-mikrotik-router-pptp/
  • http://blog.butchevans.com/2008/09/mikrotik_routeros_transparent_bridge_pptp_eoip/
• L2TP
  • http://gregsowell.com/?p=4389
  • https://www.youtube.com/watch?v=tpgEqzwj_OQ
• EoIP
  • Ethernet over IP
  • Like a bridge across a WAN or Internet
  • Layer 2
  • Router doesn't need to undertand traffic or protocols
  • http://www.lockergnome.com/it/2011/08/30/eoip-ethernet-over-ip-2/
  • http://www.youtube.com/watch?v=Sj8I7J3J0Ek
  • http://jhenry6.blogspot.com/2013/03/transparent-lan-services-with-eoip-and.html
• SSTP
  • TLS Encryption
  • Port 443
  • PPP link over encrypted tunnel
  • http://wiki.mikrotik.com/wiki/Manual:Interface/SSTP
  • Howto: https://www.dr0u.com/mikrotik-setup-sstp-server-for-windows-10-client/