Community discussions

MikroTik App
 
moonek
just joined
Topic Author
Posts: 1
Joined: Mon Jun 04, 2018 8:32 pm

VPN SSTP

Mon Jun 04, 2018 8:52 pm

Hi,

Sorry for noice, but I need some help with setup routing on my VPN tunnel.

I have remote SSTP tunnel (I'm client and I don't have access to server) with 10.50.0.x/30 - this works fine.
Now the server admin sent me a static route: 192.168.1.5/32 over tunnel. It wokrs too from Microtik if I add static route.

But I have my own server I had LAN address 10.0.0.x/24. Address from LAN is present on my server and LAN MT bridge.

How I can setup routing via my LAN over 192.169.1.5 to vpn tunnel ?


Thanks for advice.
 
AndreasGR
newbie
Posts: 45
Joined: Mon May 14, 2018 5:27 pm

Re: VPN SSTP

Tue Jun 12, 2018 5:49 pm

AFAIK your description of your problem is a bit obscure.
I think that you need to provide some detailed info about your configuration and explain the problem a bit clearer.
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 2098
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Krugersdorp (Home town of Brad Binder)
Contact:

Re: VPN SSTP

Tue Jun 12, 2018 6:50 pm

If I understand the OP correctly, the admin is pushing the route down the tunnel, so when you connect to VPN, the route will be installed dynamically, so no need to configure anything.

Your LAN server is on totally different subnet, so will not clash
 
nicolasemmanuelc
just joined
Posts: 8
Joined: Fri Dec 01, 2017 1:25 am
Location: Argentina

Re: VPN SSTP

Fri Jun 15, 2018 3:16 am

Hi,

Sorry for noice, but I need some help with setup routing on my VPN tunnel.

I have remote SSTP tunnel (I'm client and I don't have access to server) with 10.50.0.x/30 - this works fine.
Now the server admin sent me a static route: 192.168.1.5/32 over tunnel. It wokrs too from Microtik if I add static route.

But I have my own server I had LAN address 10.0.0.x/24. Address from LAN is present on my server and LAN MT bridge.

How I can setup routing via my LAN over 192.169.1.5 to vpn tunnel ?


Thanks for advice.
You need to use NAT, because the packets will reach the destination (192.168.1.5) but does not know how to come back to your LAN.
Then you have 2 alternatives,
1st: use masquerade to the outgoing packets then in the destination they will know to request because all the packets will come from your side of the VPN.
2nd: ask to the admin of the other side of the VPN to load the routes to reach back the packets to your LAN through the VPN tunnel. This solution does not need masquerade.

Post how you solved this!
Greetings!
 
nicolasemmanuelc
just joined
Posts: 8
Joined: Fri Dec 01, 2017 1:25 am
Location: Argentina

Re: VPN SSTP

Fri Jun 15, 2018 3:26 am

You can use NAT masquerade on outgoing packets to the otherside of the VPN or can contact to the VPN admin and ask to load the route to your LAN throught your VPN tunnel IP

Who is online

Users browsing this forum: No registered users and 14 guests