I’m not 100% sure Mikrotik would support it but the standard when you need
routing over an encrypted VPN is to build a GRE tunnel runs over the encrypted
(generally IPSEC) tunnel to allow a routing adjacency to form.
From: mikrotik-users-boun...@wispa.org
It’s probably a good idea to share my own experiences here.
>From what I’ve seen if you have only one or two upstream peers with full
>routing tables the CCR series gear will be very dependable. When you start
>adding complexity- say you get access to a peering exchange- you’re really