Ive read this article : http://wiki.mikrotik.com/wiki/How_to_Co ... _xDSL_Line

in my case, ill be setting it up as a pppoe client that gets authentication from my ISP, since I have an ADSL modem connected to it and my mikrotik doesnt have rj11 port, ill still be using my adsl modem to get connection from my isp,(i believe i need to set it up on bridge mode)

so assuming that all my interfaces are enabled, ill setup my eth1 interface as PPPoe client using this command

/ interface pppoe-client
add interface=ether1 user="ispusername" password="isp password" \
add-default-route=yes use-peer-dns=yes disabled=no

after that, I can check my mikrotiks ip configuration

[admin@MikroTik] interface pppoe-client> monitor pppoe-out1
status: "connected"
uptime: 1m17s
idle-time: 0s
encoding: "MPPE128 stateless"
service-name: "home_dsl"
ac-name: "Telco_DSL"
ac-mac: 00:0C:42:05:03:99
mtu: 1480
mru: 1480


setup my LOCAL network

/ip address add address=192.168.2.1/24 interface=ether2


configure masquerading

/ip firewall nat add chain=srcnat src-address=192.16820.0/24 action=masquerade


then after that,setup firewall,dhcp server(optional) and dns(optional)



so here are my questions:
1.Am I missing anything?
2.Do I need to setup a default gateway since ill be using my mikrotik as a router?
3.Is this setup enough for me to enable dynamic dns on MT and setup IPsec VPN?
4.do I have to configure VPI and VCI? (our ISP requires 0,50)

configure masquerading

/ip firewall nat add chain=srcnat src-address=192.16820.0/24 action=masquerade

Above, just add your out interface as well, which would be pppoe-client you created.

Since you told PPPoE client to add-default-route and DNS you don't have to add default route or DNS. Will be done dynamically.

Dont use IPsec VPN but guise if you could ping other side IPsec VPN would work.

VPI and VCI will be configured on ADSL modem the rest mikrotik will sort.

Thats it.