How to set up a VPN server correctly?

Question

VPN

Hello!
Due to the transition to a remote mode of operation, the implementation of a VPN server based on a Mirkotik router with OS level 4 is required.
At the moment, the VPN server was tried on an ASUS router, but it only allows PPTP, which is not suitable for standard implementation in iOS.

Tell me what type of VPN to create to encrypt traffic, the main purpose is access to RDP-working machines only from a VPN network.

Thank you!

Answer 1

In my opinion, any Mikrotik can do IPSec. And what is good about yabble (yes, even this [beep] has advantages!) - it has IPSec "sparks" (in VPN it can be referred to as IKE). If there is no experience in using certificates - IPSec rises in roadwarrior mode on PSK (Pre-Shared Key, that is, just a text password) - and let's go.
Documentation of what roadwarrior is and how to set it up is on strongswan's website. Well, Google of course.

Answer 2

How to raise VPN on this Mikrotik?