split tunnel in vpn remote access

RouterOS General
1

hi
we have vpn remote access l2tp from internet for connect to office
we need when user connect to office white vpn from internet they have internet and office network same time.
how can do it in mikrotik
device that user vpn connect mobile pc windows and android

2

L2TP does not support split tunnels. I would suggest to use either ike2 or ike1 + modeconf or OVPN to push routes.

3

If your users are on Windows 10 you can use the new PowerShell command-lets for VPN management to get some of this in place.

Something like this could be used to edit the VPN connection named MyFluffyBunny and to add a route for 10.0.0.0/8 that only is made active when the VPN (managed by the OS):

Get-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Set-VpnConnection -SplitTunneling $true
Get-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Add-VpnConnectionRoute -DestionationPrefix 10.0.0.0/8
4

Minor typo in your -DestionationPrefix, and corrected below. Otherwise, BRILLIANT! It works great. It’s possible home users will have a network/subnet: 192.168.88.0/24 (instead of 10.0.0.0/8)


5

Or just

Set-VpnConnection -ConnectionName "MyFluffyBunny" -SplitTunneling $true
Add-VpnConnectionRoute -ConnectionName "MyFluffyBunny" -DestinationPrefix "193.110.29.0/27"
6

Hi, is there any ways to configuring split tunneling on mobile phone like android and iphone using vpn in Mikrotik (like ovpn) and how is the configuration for the push route?
Thank you