SSTP VPN Guide RouterOS V7

[pooyan]

Yep @anav: VPN table is correct. But as they follow the CactusVPN screenshots in absolute detail, and I expected the main table also in the config export, what did not appear because it was empty, I tought wrongly the main table had just been renamed.

The path to the SSTP server is dynamic (DAC route) and as such is not in the config. Needs a DHCP client somewhere for the WAN AFAIK.

His internet I think is buy Cellular SIM CARD?? Not familiar with that…

He has a route to the VPN for all traffic, associated with the Table VPN, that is correct.
Not sure what else you want to see??


Personally with flat subnet, I wouldnt mangle.
Keep the table
Keep the route
Add Routing Rule
add src-address=192.168.88.0/24 action=lookup table=VPN


And for mangling as an afterthought he should have disabled his fasstrack rule ( another reason to use routing rule method instead )
add action=fasttrack-connection chain=forward comment=“defconf: fasttrack”
connection-state=established,related hw-offload=yes

Yes my internet is through LTE, my device is the Mikrotik Chateau LTE18 ax which uses a sim card and LTE to provide internet: https://mikrotik.com/product/chateaulte18_ax

I added the routing rule you mentioned but still no internet. as soon as I disable the SSTP interface I get normal internet back with no VPN obviously. The fasttrack code you mentioned, I copied and pasted your code into terminal but got a “bad command name” error.

I also tried ticking the “Add Default Route” in the sstp-out1 interface which made no difference so turned it off again.

Attached is my config now after adding the routing rule as you mentioned.
config.cfg.rsc (7.11 KB)