Community discussions

MikroTik App
 
mcw
just joined
Topic Author
Posts: 14
Joined: Wed Jun 20, 2012 5:58 pm

Balancing over two IPsec tunnels

Sun Apr 23, 2017 11:36 pm

Hello,

please consider the following setup:
WAN-lines.png
I want to connect the subnet of location B to the subnet of location A by using IPsec VPN.

As there are no realistic options to get a fast internet connection at location B we have two DSL lines which we like to bundle for use with the VPN. At location A we only have one WAN line. On both locations we have fixed WAN IP addresses.

Can anybody give me information about the structure of the setup or even configuration examples / commands on how to set up a load balancing over two IPsec VPNs?

Thanks,
Christian
You do not have the required permissions to view the files attached to this post.
 
idlemind
Forum Guru
Forum Guru
Posts: 1146
Joined: Fri Mar 24, 2017 11:15 pm
Location: USA

Re: Balancing over two IPsec tunnels

Mon Apr 24, 2017 5:28 am

Equal Cost Multipathing via routing.

https://wiki.mikrotik.com/wiki/Manual:I ... .29_routes

Setup up GRE or IPIP tunnels between LocationA and LocationB for each DSL connection at LocationB (2 IPIP or 2 GRE tunnels). You can encrypt the tunnel w/IPSec for security.

With tunnels you can assign a /30 addressing and let ECMP routing load balance across the connections. That said I've only setup ECMP on MikroTik once and it didn't work ideally. It works very well on Cisco equipment and can even do unequal cost load balancing via EIGRP.