MikroTik IPIP Tunnel with IPsec (Site to Site VPN)

IPIP encapsulates IP packets in IP to make a tunnel between two routers. Again, IPIP tunnel with IPsec ensures IP packet encapsulation as well as authentication and encryption. So, IPIP tunnel with IPsec makes a secure and authenticated site to site VPN that can be reliable to send private data across public network.

[est]

Setting tunnel IP-IP without automatic IPsec and setting it manual is better and will work when you want to connect for example CHR (Cloud Hosted Router) and physical mikrotik router. Second when you create tunnel assign IP addresses to that tunnel first and then when creating IPsec layer on that tunnel in src-address and dst-address assign ip addresses of those tunnel (not public). otherwise you create unencrypted tunnel and encrypted vpn side by side. IP tunnel + IPsec

[rsgspot]

thank you, you saved my life) best video for IPIP tunnel between 2 mikrotiks

[w.tawhidy]

I don’t have public ip because I am connecting it with 4G.
Is this possible to do site to site vpn without IP address?

[arsalanmansoor]

Why have you put the gateway of remote router in the static routing step, e-g: In office-1 configuration you have put (172.22.22.2) as gateway, whereas it should have been (172.22.22.1) as per basic static routing knowledge.

[hamzauxair]

how to connect IP SIP phone on site-2 with IP PBX server on site-1, both server and ip phone is pinging but still sip is not registering with IP PBX server

[junfengfan]

thanks, you are my teacher！ routeos network how to configure? bridge or host only ?