What IPsec configuration option between two MikroTiks would you recommend?

Question

VPN

Greetings!

(as a continuation to this question)

I bought MikroTik hAP ac2 and deployed a server with Cloud Hosted Router on board in Vultr : I plan to establish a permanent IPsec tunnel between them with routing all traffic through the latter. I have been digging on the Internet for a long time and even went to the mikrotik wiki several times, but I still can’t choose the most successful configuration option for my case (I suppose the proposed ones do not suit me). I had no experience with IPsec , and therefore I beg you to show me in which direction to dig. Thank you! :)

Answer 1

For network-to-network communication, there is one option - there is nothing to choose from. Why do you need roadwarrior? Roadwarrior - this is when one of the parties leaves through an address unknown in advance, for example, a phone, a tablet, or let's say I came to another city on a business trip, brought a microtic with me, poked into the hotel Internet - oops, I have a VPN in the office!
For permanent communication, they usually make a network-network. Well, at least it works for me - on the one hand, rb450G, on the other - strongswan on linux

Answer 2

There was l2tp network-network, now IKE2 is fast, stable, good
https://mum.mikrotik.com/presentations/ID19/presen...
https://youtu.be/VG3ULbvz1i4