Routing traffic though VPN SSTP to Mikrotik from a client W10

RouterOS General
1

Hi,

I set up my mikrotik as SSTP server and i could connected to it whitout any problem from a Windows 10 SSTP native client.
Since i have the option “use default gateway on remote network” checked, i could saw into windows 10 a default route againts the mikrotik. So all traffic is force to go through the VPN. When i unchecked this option, i could say into windows 10 route table a specific route (not the default) againts the mikrotik. So, only the traffic to my internal lan go through the VPN. (Like a Split-Tunneling)

For example in my case, the specific route which is shown me is 10.0.0.0/8 , but in the Mikrotik routing table there is not some route 10.0.0.0/8 nor in the address or ip pools.

So my question, for wich I ask your help, is whether somebody know where in the configuration of mikrotik are specified the route or routes which the client W10 get from Mikrotik when i unchecke the “use default gateway on remote network”…

Regards
Rodrigo.

2

This 10.0.0.0/8 route isn’t pushed.
afaik, ppp only negotiates an address, the route comes from classfull routing. So better use 192.168.x.x for VPN clients, this will only use class C /24 route.

Look into windows powershell Add-VpnConnectionRoute command. It can add route onto VPN connection entry.

3

The only VPN protocol in RouterOS which currently supports pushing routes to Windows is IKEv2. For all other protocols, you either have to follow the suggestion of @16again, or you may use the “normal” command line to add persistent routes (route add -p …) with gateway 0.0.0.0 and the VPN interface specified - these routes only become active if the interface is up, i.e. if the VPN connection is established. However, for some reason these routes become active when any VPN interface comes up, so this way is only useful if you only use a single VPN connection.