RB450G Router - Web Proxy forced through VPN doesn't work.

Dear Forum,
thanks in advance for any help regarding my Problem with the Setup of the RB450G.

RouterOS is v6.5

Goal: I want to set up the RB450G’s Web Proxy over an existing VPN-Connection. When I use the Internet from one of the Computers on the local Switch without Proxy, they access the Internet normally through my ISP. If I turn on the Proxy in the Browser, I would like to have the Connection tunneled through the VPN Interface via the Web Proxy of the RB450G.

Environment:
There are three Connections to the RB450G:
Port 1 is attached to the Router of my ISP (Telekom Speedport).
Port 2 is attached to a WLAN Access-Point. (That traffic is always tunneled through VPN)
Port 3 and 4 are empty.
Port 5 is attached to the local Switch.

IP Config
Port 1 is 192.168.2.2 and soley connected to the SpeedPort Router that has 192.168.2.1
Port 2 is 192.168.100.254 and manages the Access-Point’s Clients.
Port 5 is 192.168.1.100 and serves as Gateway for all Machines in the local Net.

One more Interface was created: The ‘hide.io CH’ Interface that connects to the VPN Service.

The Web Proxy is enabled and set to Port 8080. I can access it from my Machines on the local Net with 192.168.1.100:8080 and it works fine. The Machines can access the Internet.

Firewall Rules have been established. Mangle Rules were enabled.
The ‘preroute’ Mangle will push all Traffic from the WLAN Network (192.168.100.*) through the VPN Tunnel. Works fine!

Problem:

The ‘output’ Rule should force all Traffic from 192.168.1.100 (The Web Proxy) through the VPN Tunnel, but this doesn’t work. The Rule says “General” Chain output; Src. Address 192.168.1.100; “Advanced” Dst. Address is not LAN; “Action” mark_routing, Mark “through_vpn”.

The “through_vpn” Route is established and works fine for WLAN. But not for the Web Proxy. Whether I turn on or off the Proxy in my Computer’s Browser, the Connection is always established through the normal ISP Internet-Connection, not through the VPN Tunnel.

If anybody out there is able to see my mistake, please help :slight_smile:
Yours,
Peter.
mikrotik-vpn-web-proxy.png

Hello mikrotitians,

bitterbolt is a friend of mine and i helped him setup his configuration. I want to add some details to his request.
The setup he described has worked before hi updated the router to version 6.3.

We had set the source address of the web proxy to mark outgoing packets with “through_vpn” und da pakets were all routed as intended over vpn.
After the update however, the mangle roule does not work anymore even if the source address is set accordingly.

Hope i could add some details to help aus out :slight_smile:

Greets,
Robert.