Your Mikrotik firewall?

Question

Mikrotik

It was decided to switch partially to Mikrotik equipment. In the role of the head unit in the network, we will use the next device RB1100AHx2, further down the floors, the more budgetary GS-2200-48 from D-Link.
The question is what to install on the network boundary? Requirement:
Internet access up to 75 Mbps with traffic filtering (according to the rules, some types of traffic are prohibited in principle).
100 OpenVPN connections each at up to 4 Mbps.
DMZ support.
VLAN support just in case.
Well, of course, I will not voice standard features in the form of NAT, DHCP.

Answer 1

75 megabits to internet and 4x100 vpn connector? Where are the connections from?

Answer 2

Mikrotik does not know how to openVpn normally and is unlikely to be. It is better to lift this role on Linux in a virtualka. I would advise you to put PfSense on the border. There and OVPN is izkaropki.

Answer 3

sstp can be raised directly on the micro, certificates can be poured into trusted computers.
1100ahx2 has a large power reserve.

Answer 4

Если на туннелях будет шифрование, то для ваших запросов, я думаю, что лучше взять модель мощнее. Что-то из CR серии.