Mikrotik CSS326-24G-2S+RM
Be it known to all techies who want to install a VPN router, be careful that you do not buy the Mikrotik CSS326-24G-2S-RM (or Any CSS switch) because, they are switches and not routers. When you connect to the switch with winbox, you will find it in the list of neighbors, but when you click to connect to it, it will not present you with the routerOS. It will close winbox and open your default browser with very very limited options. The only IP address you can give it is the address of the box, initially set at 192.168.88.1. After that, you won't be able to do much if you're looking for a routing solution.
The router you are probably looking for is a CRS326-24G-2S+RM. One letter makes the difference