so, we need to bring several vlans from some new remote sites back to our core. we are more familiar with junos and vyatta, and used mikrotik in our lab years ago only. we are looking at L2TP to bring 32-128 vlans from each of these remote sites to our central location, without vlan remapping, the actual same 802.11q L2 frames back over public IP/layer 3 connections. (so remote site 1, may have vlans 100-199; remote site 2 has vlans 200-299, remote site 3 has vlans 300-399, and vlans 100-399 all exist in our core and would need to exist/be de-encapsulated on this L2TP 'concentrator' to trunk port(s) that have all of them tagged)
So, anyone using mikrotik + L2TP in a star configuration back to a core site? (no need for direct endpoint to endpoint comms).
sizing: type 1 and 2 are endpoints/remote sites, and type 3 would be our core.
type 1: 100Mbps minimum, bi directional, no caching at remote site needed, 500-1000 users/clients mostly web traffic, possibly some voip or skype, L2TP for all backhaul bandwidth. static IP on wan1, one LAN side access port for an UPS management card (into management vlan) and one or more gigE copper 802.11q vlan trunk ports to another network device.
is a RB2011UiAS-RM enough due to L2TP needs?
sizing:
type 2: 1000Mbps, full duplex wan, no caching at remote site needed, up to 5000 users/clients mostly web traffic, possibly some voip or skype, L2TP for all bandwidth. static IP on wan1, one LAN side access port for an UPS management card (into management vlan) and one or more 802.11q vlan trunk ports to another network device.
is a RB1100AHx2 enough or do we need to go up to the CCR1016-12G
for type 3, here is where we may need to try this: http://wiki.mikrotik.com/wiki/Manual:Pe ... _Generator as the core unit, to which all of these remote L2TP tunnels would terminate would be an x86 server(s). how many of the remote sites of type1/2 above could a 12 core server with plenty of ram support? could be 1-4Gb lacp or 10G as well.
macsec: also, for the remote site units, do these devices support macsec?