Hi! I have vpn server on mikroik with local adress, for example, 1.1.1.1 and vpn clients with mikrotik routers too with local networks 2.2.2.2, 3.3.3.3 and more.
With routes and nat I can access from 1.1.1.1 to 2.2.2.2 and 3.3.3.3. Vpn clients have access to my local network 1.1.1.1 too.
But I cant understand how to make one vpn client 2.2.2.2 have access to another vpn clients’ local network 3.3.3.3?
Sorry for my english.
Not sure of your vpn setup, but will assume that on your “hub” site you will be fine as you explained as mikrotik adds these routes dynamically.
You will now have to setup routes on your “spoke” sites to route to other “spoke” sites via the “hub” site through vpn
Can you give me example with ip addresses from my topic?
What kind of VPN are you using in particular? IPsec with policies or something else (including something like L2TP or GRE tunnelled over IPsec)?
Also, what means “client’s local network 3.3.3.3”? Does it mean e.g. 3.3.3.0/24 or is there some kind of 192.168.x.y on a LAN interface of a clien box which has 3.3.3.3 on its interface looking towards the VPN hub? A drawing with the VPN “server” and two clients and IP addresses indicated would be really helpful. A photo of a drawing by hand or some ASCII art will do, no need to spend hours with a drawing software.
On site 3.3.3.3 add a route to 2.2.2.2/24 using gateway= and vice versa for site 2.2.2.2. make sure FW config allows this traffic
other way is to create a direct site-to-site vpn between 2.2.2.2 and 3.3.3.3, then you do not use 1.1.1.1’s bandwidth for routing between these 2 sites