How do devices access internet, through a local gateway? Or through the VPN?

Internal devices connect through the gateway. VPN users connect via pptp and then out through the same gateway.

Our external IP is registered with ARIN as a US address, and iplocation.net shows a geolocation of the US. However, any computer inside the network and connected to the VPN gets redirected to Sweden, notably google sites. Does Mikrotik routers have the ability to alter the Geolocation data? if so, h...

This looks like a good idea.

I assume each router would need its own ISP connection with associated IP address?

Meaning I would also need to do DNS magic on the outside?

I have this network map: Untitled Diagram.png Is it possible to fail-over Mikrotik1 to mikrotik 2 automatically, so that if mikrotic1 crashes or goes offline, mikrotik2 can take over as gateway and DHCP server? Obviously we can have it be done manually by booting up an identical copy of RouterOS in ...

Thanks all, but it appears simply organizing for the routers to BOTH be rebooted at near-same time made it work. Odd, but I'll take it.

Okay I've gone through the suggested guides and recreated the settings as follows: [admin@OFFICE] /ip ipsec> policy print Flags: T - template, X - disabled, D - dynamic, I - inactive, * - default 0 T * group=default src-address=::/0 dst-address=::/0 protocol=all proposal=default template=yes 1 src-a...

Not sure what you wanted to achieve with such ipsec policies, but obviously src-address=0.0.0.0/24 dst-address=0.0.0.0/24 is not going to work.

I was following this video guide, and he used 0.0.0.0/24 https://www.youtube.com/watch?v=y68Dx8iPikA

Hello, Can you post your NAT rules? YOu need at least one on the top. Take a look at this great guide : http://gregsowell.com/?p=787 Regards, [admin@DATACENTER] > ip firewall nat print Flags: X - disabled, I - invalid, D - dynamic 0 chain=srcnat action=accept src-address=10.0.2.0/24 dst-address=10....

I have installed a MikroTik CRS125-24G-1S-RM on both sites, and I am trying to set up a Site-to-Site VPN between them. Configuration is as follows: [admin@OFFICE] > ip ipsec peer print Flags: X - disabled, D - dynamic 0 address=208.53.41.100/32 local-address=:: passive=no port=500 auth-method=pre-sh...