Hello everybody, I've been meddling with Mikrotik routers for about a year now and I love them deeply.

I have a question about a setup I need to... set up.

I have two Mikrotik routers in two geographically separated networks. I created an IP tunnel between them with help from a colleague a while ago: working great, but they were both using PPPoE connections.

Now one of them is connected to a router as Wan, not with direct PPPoE. I hope the following diagram clarifies:



So I was wondering, is it still possible to create an IP tunnel between the routers? I tried a bit, didn't work, I decided to ask before wasting any more time on this.

Thanks everybody.

I guess you can't forward ipip packets from modem to router? Another thing you can try is enabling keepalive on Router 01, and perhaps modem could see it as outgoing "connection" and let packets from Router 02 back in as part of it (just a guess, no idea if it will work). Worst case, you can always switch to regular VPN of your choice, with Router 02 as server and Router 01 as client.

An alternative would be to use sstp. Since it uses the https port, it would pass most modems and ISP firewalls.
You would need to generate 2 certificates and a common ca, but otherwise it works great in such circumstances.

Thanks guys. That's interesting, docmarius. I'll try that out and report back. Don't think I'll have time to tackle this before the weekend though, it's low priority.

Yeah, it's actually more complex than I thought. I forgot to mention that there are actually 2 Wans in each site. I've not been able to achieve anything for the moment.

I made it work, took some manual routes and so on. It's slow as hell though.