Setting up a GRE over IPsec tunnel between Teltonika Networks and Mikrotik devices

Introduction

Prerequisites

• Teltonika Networks router (RUTX11 will be used in this case).
• MikroTik device.
• Both devices must have WAN access with a static public IP.
• At least one end device (PC, Laptop) to configure the routers.

Configuration scheme

RUTOS device configuration

1. Login to the router's WebUI, navigate to the Services → VPN → GRE page.
2. Add a new GRE instance by entering custom New configuration name and clicking Add button.

1. A configuration window should appear. Configure the GRE instance accordingly:

1. Navigate to Services → VPN → IPsec and create a new instance.
2. A configuration window should appear. Configure the IPsec instance accordingly:

1. In the same configuration window, navigate to Connection Settings → Advanced Settings:

1. Proposal Settings must match values configured on MikroTik device.

MikroTik configuration

1. First we'll create GRE tunnel with PSK which will automatically generate IPsec instance as well. To create GRE interface access WebFig of your MikroTik device and navigate to Interfaces → GRE Tunnel and click on Add New button.
2. Configure the instance accordingly:

1. Navigate to WebFig → IP → IPsec and configure Proposals and Profiles to match proposal settings configured on RUTOS device.

1. Navigate to WebFig → IP → Addresses and add an IP address to GRE interface by clicking Add New:

1. Finally, navigate to WebFig → IP → Routes and add a static route via GRE interface by clicking Add New:

Testing configuration