On Wed, Jul 27, 2011 at 12:17:16PM +0300, Denys Fedoryshchenko wrote: > I can recommend you to try to use openvpn, if you are "Mikrotik > only". At least it doesn't have fragmentation issues, as > IPIP/GRE/PPTP has, and also it will run smoothly over NAT/SPI. Cons, > that it is a bit more laggy, because it runs over TCP.
Au contraire, OpenVPN only runs over TCP if you explicitly tell it to; default configuration, and widespread practice, is to run it over UDP. - Matt