mikrotik routeros 7.1.3. How to redirect traffic correctly?

Question

VPN

mikrotik routeros 7.1.3. There is a VPN client on it, it works.
It is necessary to redirect traffic (all/partially) from the local subnet/specific local IPs to the VPN.
As far as I know, it is possible to do this without Mangle.
In Router OS v7, route is implemented a little differently than v6.

Answer 1

Write the rule in Mangle

spoiler

Answer 2

This can be done without Mangle.
Here is a variant of my solution. It seems to work

/ip firewall nat
add action=masquerade chain=srcnat ipsec-policy=out,none out-interface=vpn-interface

/routing table
add disabled=no fib name=traf-vpn
/routing rule
add action=lookup disabled=no src-address=192.168.1.10/32 table=traf-vpn #192.168.1.10/32 - локальный ip, можно наверное и подсесть указать


/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=10.0.0.1 pref-src=0.0.0.0 routing-table=traf-vpn scope=30 suppress-hw-offload=no target-scope=10 #10.0.0.1 - vpn gateway

PS Unfortunately, the problem with this solution is that after rebooting the device 192.168.1.10 it is not assigned an ip address