Community discussions

MikroTik App
 
haldepoorter
just joined
Topic Author
Posts: 6
Joined: Fri Feb 28, 2014 4:45 pm

Fetch tool over VPN

Thu Apr 10, 2014 3:14 pm

Hello,

I have a question and i could not find the answer in the forum or wiki.
I want to use the tool fetch to get a file from our server to my mikrotik, but the file on the server is only reachable through VPN.
The device has a vpn-ipsec tunnel to connect to the server, client data goes through that tunnel, no problem.
But if i try to fetch anything on the mikrotik device, it uses plain internet, not the vpn tunnel.
So it ends up in a "forbidden" status.
Is there something i can do to force the device to use the vpn tunnel to fetch that file?
I can not give in a src-addres in fetch like i do in ping commands, and the only other thing i can think of is trying to change default routes.
Any ideas?

Thanks in advance!
 
User avatar
rickfrey
Trainer
Trainer
Posts: 609
Joined: Sun Feb 14, 2010 11:41 pm
Location: Van, Texas
Contact:

Re: Fetch tool over VPN

Thu Apr 10, 2014 4:47 pm

Specify the VPN address like this:

tool fetch address=(VPN Facing Address)
 
haldepoorter
just joined
Topic Author
Posts: 6
Joined: Fri Feb 28, 2014 4:45 pm

Re: Fetch tool over VPN

Thu Apr 10, 2014 5:15 pm

Well the thing is that i need to connect to a certain url after the VPN, so you mean doing it like this?

/tool fetch address= "VPN addres" mode=http url="http://x.x.x.x/index.php" dst-path=myfile.rsc
The x.x.x.x part is a private range only reachable after the vpn.

I've tried this but it doesn't work right away.
 
andrace
newbie
Posts: 42
Joined: Sun Sep 21, 2014 8:41 am

Re: Fetch tool over VPN

Wed Jul 22, 2015 3:28 pm

is anybody resolved this ?
 
andrace
newbie
Posts: 42
Joined: Sun Sep 21, 2014 8:41 am

Re: Fetch tool over VPN

Wed Jul 22, 2015 3:30 pm

How to forward the "toll fetch" into a ipsec or a vpn tunnel?
 
Splin
just joined
Posts: 1
Joined: Wed May 02, 2018 4:02 pm

Re: Fetch tool over VPN

Wed May 02, 2018 4:04 pm

Faced the same issue, fetch is not routing through VPN, using address argument with VPN facing IP doesn't help too. Any workaround?
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11289
Joined: Mon Dec 04, 2017 9:19 pm

Re: Fetch tool over VPN

Thu May 03, 2018 5:44 pm

Faced the same issue, fetch is not routing through VPN, using address argument with VPN facing IP doesn't help too. Any workaround?
If it is a plain IPsec VPN, try adding an individual route for the destination with pref-src set to a local IP address matched by policy. The gateway may be the same like for the default route, it is not important, the packet just must be routed "somewhere" so that the IPsec policy could match it.
 
User avatar
Anumrak
Forum Guru
Forum Guru
Posts: 1174
Joined: Fri Jul 28, 2017 2:53 pm

Re: Fetch tool over VPN

Fri May 04, 2018 5:19 pm

is anybody resolved this ?
Maybe a static route into vpn interface?
 
User avatar
sindy
Forum Guru
Forum Guru
Posts: 11289
Joined: Mon Dec 04, 2017 9:19 pm

Re: Fetch tool over VPN

Fri May 04, 2018 5:23 pm

is anybody resolved this ?
Maybe a static route into vpn interface?
With plain IPsec in tunnel mode, there is no VPN interface, which causes a lot of confusion until you get used to the whole concept.