The whole reason I am trying to do this, is that clients on any subnet should be able to reach banned webpages through the other IPsec connected subnet.
192.168.36.0/24 is the R subnet
192.168.35.0/24 is the G subnet
Example: facebook.com is included in the address list.
Nowadays if I want to reach Facebook (or any banned site), I have to open on my device a VPN connection to another site (OpenVPN). But since I have this IPsec, I want to see if it is possible with Mikrotik.
It is ridiculously easy on other firewalls (pfSense, Watchguard, Fortigate), either by NAT rules or SD-Wan policy.
I understand the mentality to do it, I just don’t freaking understand how to translate this to Mikrotik.
I think I should:
- create address list with websites I want to route
- mark packets (Mangle)
- Create NAT / Filter rules
I follow some guides regarding NordVPN, “adjusted” to my settings but no dice.
http://forum.mikrotik.com/t/nordvpn-ipsec-mikrotik-routing/140159/1
http://forum.mikrotik.com/t/nordvpn-ipsec-ikev2-killswitch-for-ros6/144817/1
I love Mikrotik devices, they do stuff that other firewalls don’t, the power they consume is minimal and I want to learn to program them so as to assist others learn this world.
Another idea is to create a separate OpenVPN connection (interface) pointing to a Watchguard device and route address list through there but I don’t want to put extra load since there is a connection already.
Thank you.