13db3aa490d54133e25677acd00212db958d0186
howto/mikrotik.md
... | ... | @@ -15,12 +15,12 @@ |
15 | 15 | |
16 | 16 | ## RouterOS limitations |
17 | 17 | |
18 | - * IPSec only supports IKEv1 |
|
18 | + * IPSec only supports IKEv1. |
|
19 | 19 | * OpenVPN only works in tcp mode |
20 | 20 | * OpenVPN does not support LZO compression |
21 | 21 | * You can't use /31 subnet for Point-to-Point (PtP) links |
22 | 22 | |
23 | -Also, you can't use a /32 on the GRE/PtP links. Even if you add a local route to your peer, BGP can't resolve the installed routes using "a nexthop interface". Please use any /30 on the GRE link, either from your assigned DN42 pool address or use a private address like 192.168. Please don't choose from 172.16.0.0/12 or 10.0.0.0/8 because they may overlap with DN42 or ChaosVPN. |
|
23 | +Mikrotik/RouterOS can't handle very well /32 on Point-to-Point links (like GRE). There is a [separate howto](/howto/mikrotik/ptp32) to explain how to setup /32 between in a GRE link (or even a OpenVPN). What is the easy way? Just use any /30 on the GRE Link, either from your assigned DN42 pool address or use a private address like 192.168. Please don't choose from 172.16.0.0/12 or 10.0.0.0/8 because they may overlap with DN42 or ChaosVPN. |
|
24 | 24 | |
25 | 25 | ## Tunnel |
26 | 26 |