Guys, I have a RB750 which is good for me. I wonder who could help me with VPN, already have two VPNs configured and it work perfectly, PPTP and L2TP. What I want to do is that the remote client to connect to the VPN could have the same subnet mask can find games like Warcraft 3 or Command & Conquer. Who can give a light I’m will be very grateful.
It’s been a long time since i did those warcraft 3 things… 
you just need 2 firewall/NAT rules to redirect tcp “battle.net” traffic to your IP
Linux iptables commands were
/sbin/iptables -t nat -A PREROUTING -i [EXTERNAL_IP] -p tcp --dport 6112 -j DNAT --to-destination [CLIENT_IP]]:6112
/sbin/iptables -t nat -A POSTROUTING -p tcp -d [CLIENT_IP] --dport 6112 -j SNAT --to-source [SERVER_IP]
Second line is mandatory only if the [VPN_SERVER] address is not the gateway of your client computer.
Obviously, those commands needs to be applied on the server side of the VPN. If it’s a Mikrotik you can access it’s easy; if it’s a third-party VPN provider, i think you’re in trouble.
For other games, i guess it’s the same, you just have to find out the port used and if it’s TCP or UDP.
Well, thanks! But i need this to RouterOS. Linux is different.
not that much different (Ros is linux-based); commands are very similar
/ip firewall nat
add action=dst-nat chain=dstnat dst-address=[EXTERNAL_IP] dst-port=6112 protocol=tcp to-addresses=[CLIENT_IP] to-ports=6112
add action=src-nat chain=srcnat dst-address=[CLIENT_IP] dst-port=6112 protocol=tcp to-addresses=[SERVER_IP]
This is kind of problematic with PPTP and L2TP, because game/hostdiscovery in warcraft 3 works by using broadcast packets,
which usually does not work over any PPP based connection. You are better off using an alternative solution like Hamachi (which I can confirm as working) or Tunngle.
Your best shot is enabling proxy-arp (which is required for PPTP/L2TP clients sharing the same subnet with your main LAN) on your LAN interface, and assigning the dial-in client a free address from your local subnet, and then trying again. I am however pretty confident it won’t be able to see the game session, maybe the game session will show up in WC3, but will fail to connect. I would really recommend using Hamachi instead.
Yep, you probably right!
Should enable proxy-arp on WAN(public) port???
No, only enable it on your LAN Port (Master-Port of switch-group, or on bridge, depending on what you use).
Still, I’d go for Hamachi in any case