Page 1 of 1

VPN for 11 sites

Posted: Mon Mar 23, 2015 1:38 pm
by wilsongamo
Hello All
I wanted to know which VPN can I implement with mikrotik to connect 11 sites
with good response time


Thanks

Re: VPN for 11 sites

Posted: Mon Mar 23, 2015 2:24 pm
by xavierbt
Hello All
I wanted to know which VPN can I implement with mikrotik to connect 11 sites
with good response time


Thanks

I have implemented an VPN from one HQ to 3 delegations. All dynamic ip. Very simple.
Follow this instructions: http://www.mikrotiktutorial.com/downloa ... te_vpn.pdf

Re: VPN for 11 sites

Posted: Tue Mar 24, 2015 11:04 am
by wilsongamo
What are the constraints of this implementation to have a best time of response

Re: VPN for 11 sites

Posted: Tue Mar 24, 2015 11:04 am
by wilsongamo
What are the constraints of this implementation to have a best time of response

Re: VPN for 11 sites

Posted: Tue Mar 24, 2015 11:12 am
by wilsongamo
What are the constraints of this implementation to have a best time of response

Re: VPN for 11 sites

Posted: Wed Apr 01, 2015 3:04 am
by wilsongamo
Hello xavierbt ;,
The account is connect but is not working i cannot ping the differents lan !!!!!

Re: VPN for 11 sites

Posted: Wed Apr 01, 2015 12:10 pm
by wilsongamo
This is my architecture
Router 1
Ip public :1.1.1.2
Lan :192.16.1.0/24

Router 2

Ip public :1.1.2.2
Lan :192.16.2.0/24

My configuration

Router 1

Enable L2TP Server
/interface l2tp‐server server
set default‐profile=Branch1 enabled=yes
Create L2TP Profile
/ppp profile
add name=Branch1
Create Login account for branch
/ppp secret
add local‐address=1.1.1.2
name=branch1‐l2tp
password=branch1‐l2tp profile=Branch1
remote‐address=1.1.2.2
routes=192.16.2.0/24 service=l2tp

Make NAT Exception for VPN Traffic
/ip firewall nat
add chain=srcnat dst‐address=192.16.2.0/24 src‐address=192.16.1.0/24

Router 2

Create L2TP Client Connection
/interface l2tp‐client
add name=l2tp‐to‐hq user=branch1‐l2tp
password=branch1‐l2tp add‐default‐route=no
connect‐to=1.1.1.2 disabled=no
name=l2tp‐to‐hq profile=default‐encryption
Route back to HQ
/ip firewall nat
add chain=srcnat dst‐address=192.16.1.0/24 src‐address=192.16.2.0/24
/ip route
add dst‐address=192.16.1.0/24 gateway=l2tp‐to‐hq

please tell me where is the error because its not working

Re: VPN for 11 sites

Posted: Thu Apr 02, 2015 12:03 pm
by wilsongamo
Please somebody can help me ???
its not working i dn't no why

Re: VPN for 11 sites

Posted: Thu Apr 02, 2015 12:06 pm
by wilsongamo
Please somebody can help me ???
its not working i dn't no why
and the l2tp client its not stable (connect and disconnect )) :( :( :(

Re: VPN for 11 sites

Posted: Thu Apr 02, 2015 2:18 pm
by wilsongamo
Follow this instructions: http://www.mikrotiktutorial.com/downloa ... te_vpn.pdf

Its not working

Re: VPN for 11 sites

Posted: Thu Apr 02, 2015 3:30 pm
by wilsongamo
Thanks
Its Working ... :D :D :D

Re: VPN for 11 sites

Posted: Fri Apr 03, 2015 12:20 pm
by xavierbt
Thanks
Its Working ... :D :D :D

Sorry,

Didn't see your messages.

Are your VPN working fine now ? What was your problem ?

regards

x

Re: VPN for 11 sites

Posted: Wed Apr 08, 2015 1:36 am
by wilsongamo
the tunnels ip adress

Re: VPN for 11 sites

Posted: Fri Apr 17, 2015 2:27 pm
by wilsongamo
HELLO
What can i do to optimize my request time
serveur to client its good
but client 1 to client 2 its very slow

thanks

Re: VPN for 11 sites

Posted: Fri Apr 17, 2015 4:09 pm
by rjickity
Go direct client to client. not hub and spoke. Work with multiple tunnels, to create a mesh

In cisco land (even vyos now) DMVPN would be the answer, in mkt land - you deal with a lot of configuration for a similar outcome.

Re: VPN for 11 sites

Posted: Wed Apr 22, 2015 5:39 pm
by wilsongamo
I m not understand
please explain well
i need router for all my client

Re: VPN for 11 sites

Posted: Wed Apr 22, 2015 7:30 pm
by troffasky
rjickity is surmising that your performance problem when sending data from client1 to client2 is due to the traffic being sent via the main site. This could be due to either congestion on the WAN link at the main site, or CPU load on the router at the main site. There are a wealth of tools available that will help you work out which one is the culprit.

The solution would be to have VPNs directly between all the clients [a mesh, as rjickity said]. This is more configuration to manage but will improve resilience and performance.

Re: VPN for 11 sites

Posted: Thu Apr 23, 2015 11:30 am
by wilsongamo
Thanks for your explain
but I dn't know how to make this
"The solution would be to have VPNs directly between all the clients [a mesh, as rjickity said]. This is more configuration to manage but will improve resilience and performance"

Thanks

Posted: Sun May 10, 2015 4:44 am
by rjickity
You need to create direct tunnels between client 1 and client 2 in addition to client1 to main site, client2 to main site etc. This way client1-client2 traffic doesn't traverse the main site.