Hi,

I have a Mikrotik Router setup on my Network, i need to create a VPN between a Netgear DG384 ADSL modem and my Mikrotik router.

I have been told by Mikrotik support that this is possible, but they cannot provide me with configuration.

Does anyone perhaps know.

many thanks for your help.

First you need to clarify a few things;

Is the DG834 in bridge mode or router mode? You say modem which then implies there is either a PC or router behind this.

If it's in router mode, you need to make sure the firmware is up to date as only the newer firmware caters for VPN connections. As far as I can tell, the only type of VPN you can set-up site-to-site is one made by using the IPSec protocol suite. The DG834 allows PPTP and L2TP pass-through VPNs but not as S2S.

So we're stuck with IPSec. First up, download this document and get the basic drift of what the netgear wants to do (and more importantly, what it can ONLY do);

http://kbserver.netgear.com/kb_web_files/n101569.asp

Then hunt around the forums and wiki for the way Mikrotik handles IPSec. I can't say I've mastered it yet but by the time you've done all this, I may well have.

BTW, this site has some interesting information WRT the netgear;

http://www.vpncasestudy.com/index.html

This is a highly complex configuration and I hope that someone will provide a Wiki article for it one day. I have attempted it without success, there is just too many settings with IPSec on the MikroTik side. From the Netgear point of view it seems quite simple because there is a wizard.

I have included some screen shots perhaps someone can help with the MikroTik IPSec side. The screenshot detailing the VPN Consortium recommendation settings might be of particular importance to get it right.

I got the connection established from the Netgear to the MikroTik but I can't do anything else. In addition I crashed the Netgear permanently by specifing ANY for source and ANY for destination. On the MikroTik side the router also bombed with this 0.0.0.0/0 configuration.

Here are more screenshots which show what settings I used to at least get the connection established: