Multiple VPN over single PPPoe-out

RouterOS Forwarding Protocols
1

I have set it up according to this page: https://wiki.mikrotik.com/wiki/Manual:PCC

Each VPN is dail-on-demand so it becomes active when traffic is routed to it. It takes a little more then second to connect. The problem is that traffic destinated for the VPN does not wait till the VPN is active and goes out trough the PPPoe-out which is an public address. The PPPoe-out is always active.

To catch this traffic, a reject line is active in filters so that traffic does not leaves the router and only can leave the router when the correct VPN is active.

How do I fix this escaping initial traffic through the PPPoe-out without having to reject it? It has to wait till the VPN is active.

2

Add a null / blackhole route with a high metric. That will catch the traffic when the VPN isn’t active. When the VPN becomes active, it will install a route with a lower metric, and the lower metric route will take preference, routing your traffic normally over the VPN.