We use L2TP/IPsec, GRE or GRE6 (optionally with IPsec) and it works very well on these
routers.
An advantage is that they provide the same configuration options on CLI or GUI so it is
possible
to provide configuration templates ready for cut/paste and still offer GUI for fine
tuning.
As all config is provided via a single interface it is much easier than plain Linux on
e.g. a Pi
where multiple config files and scripts have to be edited.
Setting up BGP on these routers is very easy, much easier than getting an IPIP gateway
going.
Most important is that the new backbone network should use standard protocols, so that we
can use standard routers like this, while those that want to can still use generic OS-es.
(they can do IPIP mesh but it is a bit of a convoluted solution, L2TP+BGP is much much
easier)
Rob
On 8/3/21 6:56 PM, Jason McCormick via 44Net wrote:
I like the MikroTik Hex line and use them myself but
their UI isn't the easiest to deal with and their OpenVPN client in RouterOS v6
isn't very good. I'm waiting for OS 7 where it's said to be improved before I
start suggesting that platform.