IPSEC VPN Tunnel on MikroTik

Understand how IPSEC tunneling protocol works and know how to apply it correctly on MikroTik RouterOS

Created by: Maher Haddad
IT instructor

What Will I Learn?

• Understand what is VPN
• Understand what is IPSEC
• Understand the 4 features of IPSEC
• Understand why IPSEC is a protocol suite
• Understand the Protocols used in the IPSEC features
• Understand IPSEC modes of communications
• Understand IPSEC Transport mode
• Understand IPSEC Tunnel mode
• Understand what is Symmetric key encryption
• Understand what is Asymmetric key encryption
• Understand how DH works to share the secret key in a secure way
• Understand the encryption protocols such as: DES, 3DES, AES, Blowfish, Camellia, RSA & DH
• Understand Data Integrity using Hashing algorithms such as: MD5, SHA1, SHA256, SHA512
• Understand the types of IPSEC authentication: Pre-shared key vs Certificate
• Understand IPSEC Negotiation Protocols: AH vs ESP
• Understand the IPSEC negotiation process
• Understand what is the initiator to start the IPSEC VPN
• Understand IKE Phase 1 (ISAKMP)
• Understand the difference between Main and Aggressive mode on IKE Phase 1
• Understand IKE Phase 2
• Understand what is PFS Group
• Understand the difference between IKEv1 & IKEv2
• Configuring IPSEC site-to-site using IKEv1
• Configuring IPSEC site-to-site using IKEv2
• Configure IPSEC IKv2 Remote Access using certificates

Requirements

• Have a TCP/IP knowledge
• Have an experience with networking
• Ideally have an MTCNA certificate

Target audience

• Students who want to learn and understand how IPSEC works and know how to configure it on MikroTik RouterOS
• Engineers who want to apply IPSEC tunneling protocol in their networks