Answer the question
In order to leave comments, you need to log in
VPN matryoshka. How to defeat IPSec?
The task is to make a VPN matryoshka doll in the form
of Mikrotik connects to the VPN server via IPSec ikev2 and all equipment in the Mikrotik network (ethernet connections) go with the external IP of the VPN service
On the computer, turn on the Windows VPN application (ProtonVPN, NordVPN) and also connect to the VPN service. I tried all available protocols: WireGuard, OpenVPN - UDP, OpenVPN - TCP
Included we have
Mikrotik RB750Gr3 6.48.3
Windows VPN application from various VPN services
Separately, only Mikrotik or only the Windows application work. How to combine?
Answer the question
In order to leave comments, you need to log in
get the corresponding IP address
Separately, only Mikrotik or only the Windows application work.
It all depends on what exactly the vpn is on the windows machine, and what its network requirements are.
For example, if the network to which the first vpn connects is itself a local network, and access to the world is through NAT, then some types of vpn ip sec or pptp) may require appropriate support on the router of this network
ps openvpn will work even if the network is behind NAT, without GRE support (required for pptp) and even using udp (or tcp as usual), multilayer vpn cascading is possible with it
Nichrome is not clear, as usual, except that, as usual, it is believed that a VPN within a VPN will give more anonymity :) without specifying against whom :)
Mikrotik connects to VPN server
all equipment in the Mikrotik network (ethernet connections) receive the corresponding IP address
Turn on the Windows VPN application on the computer
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question