MikroTik RouterOS VPN Site-to-Site Configuration With L2TP/IPSec

If you're looking to set up a Site-to-Site SSTP VPN between two MikroTik RouterOS devices, you're in the right place! Follow along as we walk you through everything you need to know to get started.

What is a Site-to-Site VPN?

A Site-to-Site VPN is a connection between two or more networks that allows them to communicate securely over the internet. This type of VPN is often used by businesses that have multiple locations, allowing them to share resources and data between sites as though they were on the same local network.

What is SSTP?

SSTP (Secure Socket Tunneling Protocol) is a VPN protocol used to secure point-to-point connections over a variety of network protocols, including TCP and HTTP. SSTP uses SSL/TLS encryption to ensure data privacy and can be used to set up both Site-to-Site and Remote Access VPNs.

Setting up a Site-to-Site SSTP VPN between Two MikroTik RouterOS Devices

Step 1: Assign IP addresses to your MikroTik RouterOS devices

Before you can set up a Site-to-Site SSTP VPN, you'll need to ensure that each of your MikroTik RouterOS devices has a unique IP address assigned to it. You can do this via the IP > Addresses menu in the RouterOS web interface.

Step 2: Configure static routing

The next step is to configure static routing between your two MikroTik RouterOS devices. This will allow them to communicate with each other over the internet. To do this, you'll need to use the IP > Routes menu in the RouterOS web interface.

Step 3: Configure an SSTP VPN Server on one of your MikroTik RouterOS devices

Now it's time to set up an SSTP VPN Server on one of your MikroTik RouterOS devices. This server will act as the "hub" for your Site-to-Site VPN. To do this, you'll need to use the PPP > SSTP Server menu in the RouterOS web interface. Be sure to configure the server to use the IP address of the device on which it is running.

Step 4: Configure an SSTP VPN Client on the other MikroTik RouterOS device

The final step is to set up an SSTP VPN Client on the other MikroTik RouterOS device. This client will act as the "spoke" for your Site-to-Site VPN. To do this, you'll need to use the PPP > SSTP Client menu in the RouterOS web interface. Be sure to configure the client to use the IP address of the SSTP VPN Server that you just set up.

Conclusion

Setting up a Site-to-Site SSTP VPN between two MikroTik RouterOS devices is a great way to securely share resources and data between multiple locations. By following the steps outlined above, you can set up your own VPN and enjoy the benefits of a secure, private network.

Have any questions or comments? Feel free to leave them below!

mikrotik vpn

Share :