Sign in Subscribe

The Lab

The Lab is a testing ground for networking research and discussion, designed to enable experimentation of network concepts in a realistic working environment.

Module 4: Control It — Bandwidth, VLANs, QoS

Manage network resources professionally in 64 minutes. Set up DHCP, segment with VLANs, control bandwidth per user, prioritize critical traffic, and build secure guest networks. Learn to organize IP addresses, isolate devices, and prevent bandwidth abuse with QoS.

VPN Troubleshooting Flowchart

Complete VPN troubleshooting decision trees for IPsec, WireGuard, and L2TP. Step-by-step diagnostics for connectivity issues, handshake failures, authentication errors, and routing problems. Includes common error messages and solutions.

Remote User VPN Config Template

Complete remote user VPN configurations using WireGuard and L2TP/IPsec. Includes server setup, client configurations for Windows/Mac/iOS/Android, user management, access controls, and troubleshooting. Choose WireGuard for speed or L2TP for built-in OS support.

Site-to-Site WireGuard VPN Config Template

Simple 5-minute WireGuard VPN setup between two MikroTik routers. Modern encryption, faster than IPsec, easier troubleshooting. Includes interface creation, peer configuration, routing, firewall rules, and support for hub-and-spoke topologies.

Site-to-Site IPsec VPN Config Template

Complete copy-paste ready IPsec VPN configuration for connecting two sites. Includes peer configuration, proposal settings, policy setup, firewall rules, NAT exceptions, and troubleshooting. Best for MikroTik-to-non-MikroTik or when IPsec is required.

Lesson 3.6: Quick Win — Working VPN in 30 Minutes

Deploy working VPN in 30 minutes with copy-paste templates. Four scenarios: Site-to-Site WireGuard (20 min), IPsec (30 min), Remote User WireGuard (25 min), and L2TP/IPsec (30 min). Includes verification checklists and common adjustments for quick implementation.

Lesson 3.5: Troubleshooting VPN Connections

Systematic VPN troubleshooting with diagnostic commands for IPsec, WireGuard, and L2TP. Solve six common problems: tunnel establishment failures, handshake issues, connectivity problems, random disconnects, client connection failures, and slow performance with decision trees.

Lesson 3.4: Remote User VPN (Road Warrior) [Preview]

Provide secure remote access with WireGuard (fast, requires client) or L2TP/IPsec (built-in OS support). Create IP pools, configure authentication, set up clients for Windows/Mac/iOS/Android, manage user access, and control network permissions with firewall rules.

Lesson 3.3: Site-to-Site VPN (WireGuard)

Modern alternative to IPsec using public/private key pairs. Create WireGuard interfaces, generate and exchange keys, configure peers with allowed addresses, and set up routing. Faster setup (5-8 min vs 15-20 for IPsec) with fewer settings and simpler troubleshooting.

Lesson 3.2: Site-to-Site VPN (IPsec)

Connect two offices with IPsec VPN. Step-by-step configuration covering two-phase negotiation, peer setup, pre-shared keys, proposals, and policies. Includes required firewall rules, NAT considerations, testing procedures, and troubleshooting decision trees for common issues.