PLEASE HELP: tunneling 2 mikrotiks with net trafic

RouterOS General
1

**hi guys,and excuse me for my poor lang.
i live in IRAN.and we have censored internet.
i have a virtual mikrotik server in germany.and i have vpn connections to it.and i've used this uncensored internet in my devices with vpn connections.

i have a hap lite router in my office.and i have not static ip in this side.
i want this router use my vpn server.and i want :without vpn connections in my devices,every devices that connected to this router,has uncensored internet.
thats means i want tunneling between two mikrotiks.
i am setting up a pptp client.and my hap lite connected to my german mikrotik server.but my internet still censored.
and thats means my net traffic is Separated from vpn server even connection is up.
in both hap lite,and vpn server,i have masquerade nat for srcnat.
please tell me if i must define routing roles,or what.**

2

Simplified:
I want to connect to the Internet in Iran with the German IP.without windows vpn connections.directly from hap lite to vpn server in german

3

Hi

You need to route all traffic except the vpn itself (so no loops) over the vpn.
BTW, given where you live, I would suggest to upgrade your vpn to higher security, ex IPSec.

Cheers

4

thank you for ur answer,sebastia.
can u explain how route all traffic exept vpn?
please write an example to understand.
and i changed to sstp server and client now.

5

Something like

/ip route
# default route
add comment=VPN distance=10 gateway=<ip gateway on vpn network>
# route to vpn server, for the tunnel itself
add comment=VPN-connection dst-address=<public ip of vpn server> distance=5 gateway=<gateway of your ISP>
... <other local networks>

and you’ll probably need to:
src nat the traffic leaving on vpn interface or
configure routing on the vpn server to forward trafffic to your local Tik