Mikrotik Fasttrack configuration with L2TP / IPSEC VPN

If you have any experience whatsoever with mikrotik hardware, you have definitely heard about Fasttrack. Fastrack was introduced back in April 2016, in v6.29 of router os, and in very simple terms allows packets for established connections to bypass the kernel, thus improving performance, and decreasing the overall cpu load. However there are known issues which prevent Fasttrack properly to work when using IPSec on the mikrotik. You will find that if you leave the default Fasttrack rule enabled in

Continue Reading

Mikrotik L2TP / IPsec VPN Server Step by Step configuration with Fasttrack enabled!

This tutorial assumes that the WAN interface of the Mikrotik router has a public IP address, and that your ISP does not block ipsec ports. With that out of the way, lets get started. The first step is to create a PPP Profile on the mikrotik. We will use a 192.168.102.1 for the local address (the VPN Gateway), assuming this is not already in use. We also need to add a DNS Server /ppp profile add name=ipsec_vpn local-address=192.168.102.1 dns-server=1.1.1.1 Next

Continue Reading

MikroTik Conditional DNS Forwarding
(with online code generator)

If you use a MikroTik router with a site to site vpn, you must have come across the issue of conditional DNS forwarding. There is a DNS server, which automatically resolves names for sites at the other end of the tunnel. However if you request a DNS record for the domain at the other end, the MikroTik router will try to resolve it via it own DNS server, which obviously does not have the required information. You always have the option to

Continue Reading