Adding a VPN Server to the current network?

Question

Network administration

There are many (branches) subnets that the provider connects with Vlans. There is a task to connect a new branch to the main network, but our provider is not there (another city). We are trying to solve the issue by buying a Mikrotik, install it from the provider, get a white IP address and raise a Site2Site Ipsec tunnel to it from another Mikrotik. The question is how to properly configure routing so that traffic from the VPN tunnel gets to the main network (Provider's network)? Can anyone advise. Thank you, of course.)

Answer 1

IPSec does not require routing. IPSec processing is carried out by a bucket according to policies that are configured either manually or automatically generated. The main thing is to correctly compose the drinkers, the tunnel itself rises from half a kick.