VPN_ether over internet protocol (EoIP )and IP-IP.pptx

mikrotik tunnel create using EoIP and IP-IP Protocol

1. Mikro T ik A complete solution of Network

2. What is VPN? Virtual Private Network ( VPN ) is a method of accessing two or more private Network over Internet. VPN extends a private network across a public network, such as the Internet.

3. VPN Benefits VPN Enable communications between corporate private LANs over Public Networks Wireless Links Leased Lines Corporate resources (e-mail, servers, printers) can be accessed securely by users having granted access rights from outside (home, while travelling, etc.)

4. Types of VPN Layer 2 VPN - EoIP Tunnel Layer 3 VPN - IP-IP Tunnel - GRE Tunnel

5. EoIP Tunnel EoIP Tunnel: Layer 2 shouted type traffic MikroTik to MikroTik Proprietary protocol tunnel-id is method of identifying tunnel. It must be unique for each EoIP tunnel. Benefits EoIP Tunnel over IP-IP Tunnel: Fresh L2 so that you can use same IP Block in both Locations. You will get the same flavor as you laid Dark Fiber between two Locations. Tally, ERP will accessible from Remote site.

6. EoIP Topology EoIP Topology: - Service will be centralized. - Any protocol or services will pass through EoIP. DHAKA TANGAIL

7. EoIP Deployment Precondition: Both WAN IP should be reachable (by ICMP)from one to another. To established a EoIP Tunnel between to two sites the steps are: - Create an EoIP Tunnel - Set a Peer (P2P) IP to check Tunnel - Add a Bridge to aggregate LAN - Test your configuration by pinging Workstation from one site to another.

8. EoIP Tunnel DHAKA-HO Creating an EoIP Tunnel EoIP Tunnel Interface is a Virtual Interface that acts as a Data Channel between one site to another. Here Local Address in not a mandatory term where as IP Tunnel it is mandatory. Procedure: Interface  EoIP Tunnel Here, Remote Address will be WAN IP of BR according to our Topology and Tunnel ID will specify the Traffic Flow.

9. EoIP Tunnel (Cont.) Set a Peer IP To test Tunnel (end-to-end) we’ve to add a P2P IP Address in Tunnel Interface. This is a P2P IP used for Tunnel Test. If any problem occurred then we’ll ping Remote Peer to specify problem domain (tunnel or somewhere else) Procedure: IP  Address If your remote EoIP is configured then you can test your Tunnel by pinging Remote Tunnel IP

10. EoIP Tunnel (Cont.) Bridge and Port Aggregation We’ve to make a Bridge Network between Tunnel Interface and LAN so that site-to-site LAN will talk to each other through Tunnel. Procedure: Bridge  Bridge Procedure: Bridge  Ports

11. EoIP Tunnel (Cont.) Note: For Remote EoIP, the configuration will be same except Remote IP

12. IP Tunnel IP Tunnel: IP tunnel is a simple protocol that encapsulates IP packets in IP to make a tunnel between two routers. The IP tunnel interface appears as an interface under the interface list. Many routers, including Cisco and Linux based, support this protocol. IP tunneling protocol adds the following possibilities to a network setups: - to tunnel Intranets over the Internet - to use it instead of source routing

13. IP Tunnel Topology IP Tunnel Topology: - Data will be encapsulated so that security will be enhanced. - IP should be different for both sites.

14. Creating IP Tunnel To configure L3VPN we’ve to create a IP Tunnel with defining Source and Destination Address. Procedure: Interface  IP Tunnel

15. P2P IP for Tunnel We’ll add a P2P IP over Tunnel Interface so that we can check our Tunnel by pinging Remote IP. Procedure: IP  Address

16. Route over Tunnel Add a Route over Remote Tunnel IP so that we can reach site-to-site LAN securely. Procedure: IP  Address

17. Test your Configuration Now you can test your configuration by pinging site-to-site LAN. Note: Firewall and Antivirus should be Offline Mode. GRE Same as IP-IP Tunnel Configuration