Page 1 of 1

VPN passthrough setup

Posted: Tue May 10, 2011 2:11 pm
by evrossen
Hi,

Am using a routerboard 493 at home. Have some issues using my work laptop with ipsec VPN to correctly connect to work VPN server.

Router is setup using NAT to my ISP. Used to have a Linksys router doing the job correctly when I enable 'VPN Passthrough'. Have been looking on how to setup this feature in the new router but cannot find it.

Does anybody have an example or pointer to how this is done?

Thanks

Re: VPN passthrough setup

Posted: Wed Jun 01, 2011 2:27 pm
by evrossen
I've noticed lots of posts wrt IPsec server on the router and clients behind NAT which is not working correctly. Is this problem also see when connecting to an external IPsec server and laptop behing the 493 router doing NAT?

Like this:

IPsec-server - Internet - 493 (doing NAT) - laptop (IPsec client).

Problem I have is VOIP connection through the IPsec tunnel being o0nly in 1 direction. I can hear the far end but they cannot hear me.

When putting old router back on my ISP link with VPN passthrough enabled it just work fine. Does this mean Linksys does a better job here compaired to ROS?

Re: VPN passthrough setup

Posted: Wed Jun 01, 2011 4:53 pm
by ditonet
Does this mean Linksys does a better job hear compaired to ROS?
ROS is better :)
In firewall rules allow traffic udp/500, udp/4500, protocols 50 and 51.
In Linksys 'VPN Passthrough' option is a shortcut to these settings, thats all.

HTH,

Re: VPN passthrough setup

Posted: Wed Jun 01, 2011 11:56 pm
by evrossen
Like this?

/ip firewall filter
add action=accept chain=forward disabled=no dst-port=500 protocol=udp
add action=accept chain=forward disabled=no dst-port=4500 protocol=udp
add action=accept chain=forward disabled=no dst-port=49000 protocol=udp
add action=accept chain=forward disabled=no protocol=ipsec-esp
add action=accept chain=forward disabled=no protocol=ipsec-ah

I've added UDP-49000 since that is used in the IPsec setup.
I see counters incrementing on UDP-500 and UDP-49000 rules, but behaviour on the VOIP client is the same (single direction voice).

Re: VPN passthrough setup

Posted: Wed Oct 25, 2017 4:18 pm
by gdelacruz
hi, our office is using tp-link vpn router using pptp.

at home i am using mt hap lite ac, but am not able to pass pptp vpn traffic towards my office vpn router using windows 8 os.

how to allow passthrough vpn an mt?