h AP Lite VPN

RouterOS Beginner Basics
1

I’d like to create a VPN from my house to the office, so if I connect to one hAP in my home, it will appear as if I am in the office.
I have static IP addresses in the office that software wants to confirm before proceeding and they do so by using the IP address in the office.
Can some one point me in the direction of how to configure each of them so I can use this as a VPN?

travel router
2

For Example:
The hAP on one end would connect to my home network and I could connect to it through wifi, receiving a dhcp address, which then would route to the other hAP in the office which would have a static IP address, that would route all traffic through the office network showing the IP address of the office.
The hAP in the office would be connected through port 1 to the internet using a static ip address like 50.50.50.2 (i know this is not real, just using it for an example)
Then port 2 would be connected to the office network and route all incoming VPN traffic through that IP address to the office internet IP address of 50.50.50.1
so if I were to do a “whatismyip.com” sort of lookup from that device in my home, it would show 50.50.50.1 as the IP address of record.

3

Hi,
from my understanding u want to access a server from your office in your home?

if not can u explain clearly

if it is all you need is a tunnel which will be site to site vpn

but both office and home needs public ip address

4

Public IP at one side is enough.

5

And it does not even have to be a fixed public IP. One side must be reachable with one IP port. Use DDNS to resolve the IP address.

I have this setup:

  1. Home : hAP Lite behind the ISP modem/router. ISP modem router set to forward one IP port (XXXX3) to the hAP Lite.
    In hAP Lite :activate DDNS in IP cloud. Has unique full qualified DDNS name based on serial number.
    hAP Lite configured as SSTP server on that forwarded port number, (or the mapped port number if appropriate).
    hAP Lite set to Masquerade traffic going through VPN. (masquerade interfaces all , but LAN interface list)
    Create user and user secret for SSTP. Create user profile in PPP with tunnel IP adresses.
    IP route for office IP range with remote tunnel IP address as gateway. (If you want to access internet also through the office then this would be the default route, or whatever IP destination you want to take the tunnel first)

2 Remote office or installation. hEX is behind router with NAT, and router connected via load-balancing that does NAT and connects to a multitude of uplinks, that also do NAT on their own. Public Ip is variable, uplink used varies over time. No way to make an inbound connection.
The hEX is set up for its function and has one (WAN) masqueraded link to the office LAN, but also has a SSTP client set up, to connect to the hAP Lite via SSTP.
Create sstp-client with previous DDNS name of hAP Lite, the port used (XXXX3) and the same username/credentials.
The connection tunnel will have a local IP address given by the hAP Lite, and ALL access coming through the tunnel will have the IP address of the hAP Lite. The hEX does not need an IP route to answer devices behind the hAP Lite, as the SSTP tunnel is a local connect.

Working from behind the hAP Lite all office systems and internet gateways will see the source address as the hEX (WAN) port address. The hEX can be connected just anywhere in the LAN network, as long it has outgoing internet access.

With a second (portable mAP Lite?) MKT, the same hAP Lite port can be used as a TURN server. Access to the (unreachable) office on the road.:slight_smile:
We work on this with 3 hEX, 2 hAP Lite and 2 mAP Lites. (2 Operators, 3 sites)