Ipsec Vpn Between Cisco and Mikrotik

[bennhana]

Hi all

I need to configure an IPsec VPN server on Cisco. There are three branches all using Mikrotik routers. The Cisco and all the Mikrotiks connect to the ISP using PPPoE. The Cisco is at the HQ hence it will be the IPsec server. I have never done this type of VPN via PPPoE. Does anyone have configuration examples I can use to test in a lab, on eve-ng before doing it on the production network?

Thanks in advance.

[Flavio Miranda]

@bennhana 

 Which Cisco device do you have and which IOS version? Do you have license for VPN on it?

[bennhana]

Here is the information below

Cisco IOS XE Software, Version 16.09.06
Cisco IOS Software [Fuji], ISR Software (X86_64_LINUX_IOSD-UNIVERSALK9-M), Version 16.9.6, RELEASE SOFTWARE (fc2)

NAME: "Chassis", DESCR: "Cisco ISR4331 Chassis"

Suite License Information for Module:'esg'
--------------------------------------------------------------------------------
Suite Suite Current Type Suite Next reboot
--------------------------------------------------------------------------------
FoundationSuiteK9 None None None
securityk9
appxk9
AdvUCSuiteK9 None None None
uck9
cme-srst
cube
Technology Package License Information:
-----------------------------------------------------------------
Technology Technology-package Technology-package
Current Type Next reboot
------------------------------------------------------------------
appxk9 None None None
uck9 None None None
securityk9 securityk9 Permanent securityk9
ipbase ipbasek9 Permanent ipbasek9
The current throughput level is 100000 kbps
Smart Licensing Status: Smart Licensing is DISABLED

[Flavio Miranda]

Take a look on this guide. The IOS version is a bit newer than yours but maybe you consider upgrade

Security and VPN Configuration Guide, Cisco IOS XE 17.x - Configuring Security for VPNs with IPsec [Cisco IOS XE 17] - Cisco

[bennhana]

Let me go through this and maybe I will be able to do the lab. Thanks

[MHM Cisco World]

https://www.cisco.com/c/en/us/support/docs/security-vpn/ipsec-negotiation-ike-protocols/14131-ios-804.html

You can use dynamic to static VPN

MHM