How to route from OVPN client to specific IPSEC tunel ?

RouterOS General
1

We have IPSec tunel only from my local network 10.10.110.0/24 to our customer.
We have new OVPN for our clients. 192.168.10.0/24 to 192.168.10.1

Limitation: Out customer is not willing to make changes and add our new OVPN network 192.168.10.0/24 to the IPec tunnel for our OVPN network.

There is an idea to do a masquerade 192.168.10.0/24 network. But the masquarade will not give ip address from range 10.10.110.0/24, but a public address.
And besides, there is no routing table for ipsec. Only internal (?)

can you tell me how to setup mikrotik router so that the ovpn client can reach the customer’s application with the ip address included in the existing ipsec tunnel?

look at attaced picture
2020-10-16_16-35-00.jpg

2

Don’t use masquerade, use src-nat and then you can set any address you want. IPSec doesn’t use routes, it checks if source and destination matches existing policy. Once you add correct srcnat rule, it will.

3

Thank you this work,
chain=srcnat action=src-nat to-addresses=10.10.110.1 src-address=192.168.10.0/24


Is it ok, that the address 10.10.110.1 is the address of the router interface?

4

All IPSec cares about is that source is in 10.10.110.0/24. It can be router’s own address, or you can dedicate some other for this. It doesn’t even have to be assigned anywhere.