EoIP: bridge LANs over the Internet
Easy solution for connect LAN between Work and Home.
Anuwat Ngowchieng (MTCNA, MTCWE)
too101@gmail.com
MUM THAILAND IN MAY 22,2014
EoIP
Ethernet over IP (EoIP) Tunneling is a MikroTik RouterOS
protocol that creates an Ethernet tunnel between two routers on
top of an IP connection. The EoIP tunnel may run over IPIP
tunnel, PPTP tunnel or any other connection capable of
transporting IP.
When the bridging function of the router is enabled, all Ethernet
traffic (all Ethernet protocols) will be bridged just as if there
where a physical Ethernet interface and cable between the two
routers (with bridging enabled). This protocol makes multiple
network schemes possible.
MUM THAILAND IN MAY 22,2014
Network setups with EoIP interfaces
● Possibility to bridge LANs over the Internet
● Possibility to bridge LANs over encrypted
tunnels
● Possibility to bridge LANs over 802.11b 'ad-
hoc' wireless networks
MUM THAILAND IN MAY 22,2014
Example
MUM THAILAND IN MAY 22,2014
Example
MUM THAILAND IN MAY 22,2014
Application
● Access Home resource from work
– NAS
– Printer / Scanner
– IP camera
– Remote desktop
– Internet
– Other
MUM THAILAND IN MAY 22,2014
Advantages and Disadvantages
Advantages Disadvantages
● Easy to setup ● RouterOS only
– Port forwarding
– Access lists
● Portability
● Security
MUM THAILAND IN MAY 22,2014
Setup step
● Create EoIP tunnel
● Bridge local interfaces with EoIP tunnel
● Filter DHCP requests over EoIP
MUM THAILAND IN MAY 22,2014
Configuration
MUM THAILAND IN MAY 22,2014
Create EoIP tunnel
Office Home
MAC Address: 00:00:5E:80:00:00 - 00:00:5E:FF:FF:FF
MUM THAILAND IN MAY 22,2014
Create EoIP tunnel
● Office
/interface eoip
add mac-address=00:00:5E:80:00:FE name=eoip-tunnel1\
remote-address=b.b.b.b tunnel-id=9
● Home
/interface eoip
add mac-address=00:00:5E:80:00:01 name=eoip-tunnel1\
remote-address=a.a.a.a tunnel-id=9
MUM THAILAND IN MAY 22,2014
Bridge local interfaces with EoIP tunnel
/interface bridge port
add bridge=bridge-\
local interface=eoip-\
tunnel1
MUM THAILAND IN MAY 22,2014
Filter DHCP request over EoIP
MUM THAILAND IN MAY 22,2014
Filter DHCP requests over EoIP
/interface bridge filter
add action=drop chain=forward comment=\
"Drop all DHCP requests over EoIP bridge"\
dst-port=67 ip-protocol=udp \
mac-protocol=ip
MUM THAILAND IN MAY 22,2014
Things to Consider
● IP address management
– Static leases for DHCP
– Separate range for DHCP pool
● Firewall
MUM THAILAND IN MAY 22,2014
Thank You
MUM THAILAND IN MAY 22,2014