13db3aa490d54133e25677acd00212db958d0186
howto/mikrotik.md
| ... | ... | @@ -15,12 +15,12 @@ |
| 15 | 15 | |
| 16 | 16 | ## RouterOS limitations |
| 17 | 17 | |
| 18 | - * IPSec only supports IKEv1 |
|
| 18 | + * IPSec only supports IKEv1. |
|
| 19 | 19 | * OpenVPN only works in tcp mode |
| 20 | 20 | * OpenVPN does not support LZO compression |
| 21 | 21 | * You can't use /31 subnet for Point-to-Point (PtP) links |
| 22 | 22 | |
| 23 | -Also, you can't use a /32 on the GRE/PtP links. Even if you add a local route to your peer, BGP can't resolve the installed routes using "a nexthop interface". Please use any /30 on the GRE link, either from your assigned DN42 pool address or use a private address like 192.168. Please don't choose from 172.16.0.0/12 or 10.0.0.0/8 because they may overlap with DN42 or ChaosVPN. |
|
| 23 | +Mikrotik/RouterOS can't handle very well /32 on Point-to-Point links (like GRE). There is a [separate howto](/howto/mikrotik/ptp32) to explain how to setup /32 between in a GRE link (or even a OpenVPN). What is the easy way? Just use any /30 on the GRE Link, either from your assigned DN42 pool address or use a private address like 192.168. Please don't choose from 172.16.0.0/12 or 10.0.0.0/8 because they may overlap with DN42 or ChaosVPN. |
|
| 24 | 24 | |
| 25 | 25 | ## Tunnel |
| 26 | 26 |