I have a VPN account with on of the thousands of companies out there. i use it to get to blocked webpages contents on the net. on my computer i have setup a a vpn connection which dials out when i need it..
The question is: i want to make all computers on the Network go thru that same VPN without having to dial out each computer alone to that account.
i have set up a PPTP client which connects OK to the remote Tunnel, but then the internet traffic won’t go through it…
i have looked for documentations alot and most of them only talking about connecting two RB’s together through a VPN tunnel, which doesn’t help me…
this is not what i am looking for… i have looked through it before..
I am not looking for Router to Router tunnel connection!
what i am looking for is to make all the computers on my private network exit to the internet through a VPN connection which i subscribed to so i can access blocked content on this side of the world…
Uhm, that’s pretty much the definition of a router to router tunnel connection, the server endpoint is just out of your control and most likely not the same operating system - but that doesn’t matter.
You simply configure your router as a client and connect it to the VPN server you’ve subscribed to, and then define routing on your router so that traffic from the LAN flows through the VPN connection. Here the relevant sections from the manual I posted:
Where 192.168.80.1 represents the publicly reachable IP of the VPN server you’re connecting to, ‘ex/lkjrht’ are the user credentials, 10.0.103.1 is the VPN IP of the server you’re connecting to, and 10.150.2.0/24 is the traffic you want to flow over the VPN tunnel. Adjust the parameters as required. Nothing in the client example requires the other end to be RouterOS.
As far as the routing goes, since you have the special case of wanting all traffic from clients behind the router to go via the tunnel it it would be best to set up route marking for traffic from the LAN like below, make sure to substitute the gateway IP for the VPN server tunnel IP and the name of your LAN facing interface:
[admin@MikroTik] /interface pptp-client print
Flags: X - disabled, R - running
0 R name="StrongVPN" max-mtu=1460 max-mru=1460 mrru=disabled connect-to=74.217.58.3
user="XXXXXX" password="XXXXXXXX" profile=default-encryption add-default-route=no
dial-on-demand=no allow=pap,chap,mschap1,mschap2
the problem is routing a single computer to go through that VPN connection… or making the whole network go through the VPN tunnel??
here is my routing table:
[admin@MikroTik] /ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 192.168.1.1 1
1 ADC 172.16.26.1/32 74.201.179.213 StrongVPN 0
2 ADC 192.168.0.0/24 192.168.0.1 AP WLAN 0
3 ADC 192.168.1.0/24 192.168.1.100 WAN 0
4 ADC 192.168.3.0/24 192.168.3.1 LAN 0
5 ADC 192.168.5.0/24 192.168.5.1 FD5 0
6 ADC 192.168.6.0/24 192.168.6.1 Office 0
connection number 1 is made by the VPN interface as soon as it connect, the rest is my network configuration…
i want all computer connected through 192.168.3.0/24 to go through the VPN tunnel… or at least to assign a single or couple ip’s to go through the vpn tunnel??
i have tried the previous post and no luck, any input would be appreciated.
just setup some routes for those users thru the tunnel. and use src-nat or masq if necessary. its not different than having a second ISP, just route what you want where you want.
you may need to use policy routing if you dont want everything to leave that vpn tunnel. it can be done…
just wireshark port 80 access from hulu. You will see some IP’s that are used only for location check.
I dont remember them on top of my head - but from the many… IPs you only need to route a couple of them via VPN. Then you are telling hulu you are in the states…
Then all you need to do is route the “datastream” via vpn as well. It uses port 1935 or some other fun port..
