Can you mix and match tunnel clients and servers on the same MikroTik router?

• A. Yes, any number any combination
• B. No, you must keep same role
• C. Only if you enable Advanced Mode
• D. Only with a dedicated license

Answer: (A)

On MikroTik RouterOS, you can run multiple VPN tunnel instances and mix their roles. A router can simultaneously act as a tunnel server for some peers and as a tunnel client to others, all on the same device. Each tunnel is a separate peer/interface with its own endpoints, addressing, and credentials, so there’s no inherent restriction forcing all tunnels to share a single role. This enables scenarios like hosting L2TP/IPsec servers for remote users while also connecting as a client to a central hub or to multiple sites. Just keep in mind practical limits like hardware resources and avoiding overlapping IP subnets, and remember that you don’t need Advanced Mode or a special license for this—the standard capabilities support multiple tunnels as long as the device can handle the load.