MikroTik VPN Configuration Handbook
Tested RouterOS 7 Setups for WireGuard, IPsec, L2TP, SSTP and EoIP — Site-to-Site, Remote Access, and the Firewall Rules Tutorials Leave Out
Working RouterOS 7 tunnels for WireGuard, IPsec, L2TP, SSTP, OpenVPN and EoIP, including the firewall, routing and NAT rules that make them carry traffic.
What's inside
- WireGuard and IPsec site-to-site, plus remote access with L2TP, SSTP and OpenVPN
- The four things every tunnel needs: input rule, route, NAT bypass, forward rule
- CGNAT, hub and spoke, strongSwan interop, and failover with OSPF
- Troubleshooting: tunnel up but no traffic, logs, sniffer, MTU and MSS