Mikrotik, which protocol to use to interconnect networks over a direct ethernet connection?

Question

Computer networks

How to properly organize a secure channel between two local networks.
Each of the networks is controlled by a Mikrotik router, the networks are interconnected via a twisted pair cable.
Which protocol available in Mikrotik is better to use:
Transport or tunnel mode IPSec
GRE
EoIP
VPN connection
.......
Ie . so that the channel is encrypted and the speed is at the maximum and the load on the routers is not high.

Answer 1

IMHO, in your case it is enough to set up a trunk with a VID that is completely non-obvious.

Answer 2

Depends on your budget and hardware, as well as the degree of paranoia

Answer 3

Twisted pair just between two routers? What is encryption for? Is there any possibility that someone can physically access the cable?
EoIP - if your traffic is routable, then nafig is not needed. It has a lot of overhead for broadcasting and the like.
GRE or IPIP is the fastest tunnel option. Further, the speed will depend on the IPSEC setting. Again, depending on what tasks. 50-70 megabits on cat5e you will squeeze out on almost any micros. If gigabit speeds are needed, then there may already be drawdowns in hardware.
IMHO

Answer 4

Colleague, if you really want to do IPSec so much. Stupidly apisek between 2 points. Tunnels are not needed. Regarding the transport and tunnel mode, in the transport current the data is encrypted, the headers are not, and in the tunnel the packet headers are encrypted. EMNIP
What's the point in general??? If the networks are directly connected by a twist? Do you work in the military / FSB / FBI / CIA? Why such paranoia?

Answer 5

How to properly organize a secure channel between two local networks.
Each of the networks is controlled by a Mikrotik router, the networks are interconnected via a twisted pair cable.
Which protocol available in Mikrotik is better to use:

There are many options for how to do this.
In your option between networks, raise ipip , it already has ipsec and is configured very simply.
and in general there is 802.11x for networks, but on ticks it is implemented only for wifi.
Every device on the network will transmit encrypted data