Configuring Mikrotik RouterOS VPN with IPsec: A Step-by-Step Guide

In this article, we will explore the process of configuring a VPN on Mikrotik RouterOS using IPsec protocol. With this setup, you can create a secure and encrypted connection between two locations over the internet.

To begin, navigate to the Tunnel configuration screen in your Mikrotik RouterOS device. Ensure that 'Enable IPsec' is ticked and click 'Apply' for the changes to take effect. If you fail to do so, the tunnels will not start functioning properly.

Next, move on to the Tunnel settings page and locate the newly created phase 1 configuration. You should see a button labeled 'Add Phase 2 Entry'. This is where you configure the actual traffic encryption stage of your VPN connection.

In this section, you can customize various settings to suit your specific requirements. For instance, you may want to enable Dead Peer Detection, which will restart the tunnel in case it becomes unresponsive. You can also specify the delay time (in seconds) and the number of retries before restarting the tunnel.

Additionally, you need to configure the Interface setting to use the WAN interface, which is your external connection to the internet. For Internet Protocol, select v4 if you have IPv4 connectivity or v6 for IPv6 connectivity.

Once you have configured these settings, move on to the Authentication stage. This is where you specify how your two devices will communicate with each other over the VPN connection. In our example, we are creating a VPN between two houses, each with its own Local Network (A /16) connected over the internet.

To illustrate this setup, imagine a diagram like this:

Local Network | House 1 | Internet | House 2 | Local Network

In this scenario, Mikrotik RouterOS is used at one end and OPNsense is used at the other. We needed to create a VPN connection between these two locations so that we could securely connect our Ubiquiti Unifi APs.

As someone who has previously used Mikrotik devices for VPN setup, I found this process relatively straightforward. However, if you are new to IPsec or VPN configuration, it's essential to take your time and ensure each step is correctly configured before proceeding.

By following these steps and configuring your Mikrotik RouterOS device with IPsec, you can establish a secure and reliable VPN connection between two locations over the internet.

Mikrotik routeros vpn config ipsec