M
M
masterfiles2021-10-08 19:04:40
VPN
masterfiles, 2021-10-08 19:04:40

Mikrotik, how to set up a route through VPN?

6160692ab0de2247839759.jpeg
Good evening!
An example network diagram is attached above.

The situation is that a computer and Mikrotik are connected to the same VPN server. Full access is to all three. The task is to get access from computer 10.1.2.5 to subnet 172.10.10.0/24.
From the computer there is access to Mikrotik, at 10.1.2.4. I registered a route inside the VPN server to the subnet 172.10.10.0/24 with the gateway 10.1.2.4. After that, access to Mikrotik appeared at 172.10.10.2, but there is no access to other resources in the local area 172.10.10.0/24.
Traceroute shows 10.1.2.1 (VPN server), then 10.1.2.4 (mikrotik), that's it.

The gateway for all devices in 10.0 LAN is 10.1 (including for Mikrotik). I don't have access to the rest of the equipment.

From under Mikrotik there is full access to the entire local area 172.10.10.0/24, all equipment is pinged.
I believe that my requests from 10.1.2.5 reach the conditional 172.10.10.5, but do not go back, since 10.5 sends a response to the gateway 10.1, and there it is lost.
There is no possibility to register a route on the gateway.

I looked towards NAT on Mikrotik, so that 10.1.2.5 could pretend to be an address from 10.0 locale, so that packets would go to it directly, but I don’t understand how to do it correctly.
Please help me to solve this problem.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
M
masterfiles, 2021-10-11
@masterfiles

Understood. It only took one rule, as usual:

/ip firewall nat add chain=srcnat dst-address=172.20.10.0/24 action=masquerade

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question