Hello.
We’ve tried to connect hAP AC with LTE USB modem as a L2TP client to our VPN L2 overlay based on SoftEther server in public cloud.
We have 10.0.0.0/15 (production segment) and 192.168.88.0/24 (wifi segment) networks behind hAP. VPN overlay network is 192.168..168.0/24.
There is no problem with L2TP connectivity - it works well. So when we try to ping hosts in VPN network from production or wifi segments interfaces we have no success, it works only with masquerading on l2tp virtual interface.
Could you help with explanation on can we and how we can use hAP in routed mode (without NAT) as a gateway for production and wifi internal networks to L2TP VPN network?
Appreciate your help.
Here is routs for info:
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 192.168.0.1 0
1 Do 0.0.0.0/0 172.16.0.1 110
2 ADC 1.0.0.1/32 192.168.168.12 l2tp-v2.xx.xx.xx 0
3 ADo 10.0.1.0/24 172.16.0.1 110
4 ADo 10.0.2.0/23 172.16.0.1 110
5 ADo 10.0.9.0/28 172.16.0.1 110
6 ADo 10.0.9.16/28 172.16.0.1 110
7 ADo 10.0.9.32/28 172.16.0.1 110
8 ADo 10.0.9.48/28 172.16.0.1 110
9 ADo 10.0.9.64/28 172.16.0.1 110
10 ADo 10.0.9.80/28 172.16.0.1 110
11 ADo 10.0.9.96/28 172.16.0.1 110
12 ADo 10.0.64.0/24 172.16.0.1 110
13 ADo 10.0.65.0/24 172.16.0.1 110
14 ADo 10.0.72.0/28 172.16.0.1 110
15 ADo 10.0.72.16/28 172.16.0.1 110
16 ADo 10.0.72.32/28 172.16.0.1 110
17 ADo 10.0.72.48/28 172.16.0.1 110
18 ADo 10.0.72.64/28 172.16.0.1 110
19 ADo 10.0.72.80/28 172.16.0.1 110
20 ADo 10.0.80.0/26 172.16.0.1 110
21 ADo 10.0.96.0/27 172.16.0.1 110
22 ADo 10.0.96.32/28 172.16.0.1 110
23 ADo 10.0.96.48/28 172.16.0.1 110
24 ADo 10.0.96.64/32 172.16.0.1 110
25 ADo 10.0.97.0/30 172.16.0.1 110
26 ADo 10.0.97.4/30 172.16.0.1 110
27 ADo 10.0.99.0/24 172.16.0.1 110
28 ADo 10.1.1.0/24 172.16.0.1 110
29 ADo 10.1.2.0/23 172.16.0.1 110
30 ADo 10.1.9.0/28 172.16.0.1 110
31 ADo 10.1.9.16/28 172.16.0.1 110
32 ADo 10.1.9.32/28 172.16.0.1 110
33 ADo 10.1.9.48/28 172.16.0.1 110
34 ADo 10.1.9.64/28 172.16.0.1 110
35 ADo 10.1.9.80/28 172.16.0.1 110
36 ADo 10.1.96.32/28 172.16.0.1 110
37 ADo 10.1.96.64/32 172.16.0.1 110
38 ADC 172.16.0.0/16 172.16.0.2 ether1 0
39 ADC 192.168.0.0/24 192.168.0.104 lte1 0
40 ADC 192.168.88.0/24 192.168.88.1 bridge 0
41 A S 192.168.168.0/24 l2tp-v2.xx.xx.xx 1