· MikroTik, RouterOS 7.25, IPsec, BGP
Route-based IPsec on MikroTik: xfrm interfaces in RouterOS 7.25
Hub-and-spoke IPsec without a policy per subnet: the tunnel becomes an interface, routes come from BGP, and BFD catches failures.
ReadArticles
Walkthroughs of real configurations: networks, VPN, security. No filler, ready-to-paste commands.