Hi,

we need a solution for the following setup:

A site to site VPN shall be established between headquarter and branch office:

A) Headquarter is online via 1 WAN line and uses Palo Alto appliance. Subnet 10.1.0.0/16.
B) branch office is online via 2 WAN lines (different providers) using Mikrotik CCR. Subnet 10.4.0.0/16.

VPN shall enable traffic between both subnets. Both WAN lines of branch office shall be used for VPN traffic to increase bandwidth.

Is it possible to load balance the VPN over the two WAN lines? Which concept / setup would you suggest? Preferred VPN protocol is IPsec.

Can we establish 2 IPsec tunnels (with or without L2TP?) and do balancing over the two tunnels? Is this possible to create 2 tunnels for only 1 subnet? How can the routing / balancing be implemented?

We would be thankful for any suggestions.

Thanks,
tantalos

If you're using OSPF, you should be able to use the same cost for each route to balance the traffic (ECMP). It's in the OSPF docs: https://help.mikrotik.com/docs/display/ROS/OSPF