Virtual Private Networks
VPN documentation covers RouterOS tunnel and VPN technologies, including IPsec, L2TP, PPPoE, PPTP, SSTP, OpenVPN, WireGuard, GRE, EoIP, IPIP, 6to4, and ZeroTier. Use this section to configure secure or encapsulated connectivity.
to4
This page documents the MikroTik RouterOS 6to4 interface configuration, explaining how IPv6 packets can be transmitted over IPv4 networks without explicit tunneling. It details properties like MTU, keepalive settings, and IPsec integration, along with configuration examples for establishing 6to4 tunnels.
EoIP
Ethernet over IP (EoIP) Tunneling in MikroTik RouterOS creates secure Layer 2 bridges over IP networks using GRE encapsulation, supporting flexible topologies like LAN extension and encrypted connections with IPsec.
GRE
Generic Routing Encapsulation (GRE) is a tunneling protocol for encapsulating various network protocols over IP, implemented as virtual interfaces in RouterOS with optional keepalive and properties like MTU, MSS clamping, and DSCP settings for reliable traffic forwarding.
IPIP
IPIP (IP-in-IP) is a tunneling protocol in RouterOS for secure point-to-point connections over IP networks, supporting IPv4 encapsulation and interoperability with other platforms. It offers basic configuration options like MTU, keepalive, and DSCP settings, with warnings about lack of encryption.
IPsec
2 items
L2TP
1 item
OpenVPN
OpenVPN is a secure VPN protocol offering Layer 2/3 tunneling, IPv4/IPv6 support, and flexible transport protocols (UDP/TCP). It supports client-server deployments with configurable authentication, encryption ciphers, and route management. OpenVPN on RouterOS has limitations like missing LZO compression and NCP autonegotiation, while offering TLS-based authentication and importable
PPPoE
2 items
PPTP
This page documents the PPTP (Point-to-Point Tunneling Protocol) implementation in MikroTik RouterOS, covering client and server configuration options including authentication methods, MTU/MRRU settings, and TCP port requirements. It highlights security limitations and provides example setup commands for PPTP client connections.
SSTP
SSTP provides secure remote access over HTTPS using TLS encryption, enabling VPN connections through firewalls and NAT devices. The page details SSTP client and server properties including authentication, encryption settings, and connection management options for MikroTik RouterOS.
WireGuard
WireGuard is a modern VPN solution offering fast, secure encryption across platforms with detailed configuration options including private/public keys, VRF routing, and peer management for establishing encrypted tunnels between devices.
ZeroTier
ZeroTier is a network virtualization engine for MikroTik RouterOS that enables secure, cross-network device connectivity via Ethernet virtualization and cryptographic peer-to-peer networks. It supports gaming, LAN access, NAT traversal, and remote Pi-Hole management while requiring proper UDP port configuration, NAT type selection, and minimal NAT layers for reliable connections.