Disable NAT on VPN connections

RouterOS General
1

Hi All ,

I am trying to setup Mikrotik as a internet gateway ( through pppoe) , Also external users can connect using vpn to mikrotik to have access to office computers but they shouldn’t have internet access using vpn connection …

what is working :
dhcp and internet access for local users are working fine.
I can connect to the mikrotik using pptp vpn …

what is not working :
I have internet access using that vpn connection ..
I don’t have access to the local office computers

mikrotik ip : 10.10.10.1
office local ip range : 10.10.10.10 - 10.10.10.100
vpn ip range : 10.10.10.101 - 10.10.10.150

how can I exclude vpn ip range from being routed to the pppoe connection ?
mikrotik.jpg

2

Use filters in the forwarding chain of IP Firewall.

To access the local LAN you probably need Proxy-ARP running on the LAN interface and to allow that traffic in the forwarding chain.