L2TP VPN only local network

RouterOS General
1

Hi There,

can we limit only access user vpn to connect local network and redirect internet connection to his own..?
like openvpn we can only allow internal then internet access re route to their own internet
i try to find out but still no luck please advice if some one can do this.


thanks for help

2

Mikrotik as an L2TP server does not support route pushing to the client - currently, the only VPN protocol where Mikrotik can push routes to client is IKEv2. So you have to configure the L2TP clients accordingly, some support that (Windows, other Mikrotik, Android 10 on my phone), some may not.

3

hi sindy thanks for the reply, so what protocol support for mikrotik so i can achieved my need…?

thank btw

4

Quoting myself:

5

so using ipsec with IKEv2 then do you know how to route the client to using their own internet connection..?
thanks btw

6

With IKEv2, you set the local subnet in the split-include parameter on the mode-config row. For Windows, multiple subnets can be pushed this way; for other clients, only the first one on the list seems to work for iOS and Strongswan. No idea how the embedded VPN client on newer Androids, which supports IKEv2 natively, handles this.

7

thanks a alot sindy for your time and help appreciate

8

It looks like it still doesn’t work properly on Android 13!
Which is unfortunate because Android 13 has removed all other VPN types (PPTP, L2TP) and forces the use of IKEv2.

9

Confusing, why not use wireguard.
android to router to config router CHECK
android to router to router subnets CHECK
android to router out router internet CHECK…

By use of routing table, route, routing rules can determine which WAN at router, the client uses…
What am I missing…

10

We want to use built-in VPN. And our router is running 6.49.7 (we need working BGP). So no Wireguard option.