Hello, I am trying to configure a tunnel with public ips from my VPS (CHR) to my local network (RouterOS)
I followed this guide: http://forum.mikrotik.com/t/trouble-resolving-domains-using-remote-dns-server-over-ipsec/139181/1 and everything is working less one thing, I can´t ping the public ip from the local network, it works if I use a VPN, but if using any local ip address to the public IP it times out, I tried creating fw rules and reviewing the ip routes, but I am unable to make it work.
Here are my configurations, if anyone could help I would be grateful.
On Router OS Config - home office enviroment
/interface ethernet
set [ find default-name=ether2 ] disable-running-check=no name=Freebox
set [ find default-name=ether1 ] disable-running-check=no name=LAN
/interface ipip
add allow-fast-path=no local-address=x.x.3.60 name=GAN-VPS remote-address=x.x.166.197
/interface list
add name=WAN
/ip pool
add name=dhcp ranges=192.168.7.0-192.168.7.254
add name=DHCP_LOCAL ranges=10.0.6.1-10.0.7.254
/ip dhcp-server
add address-pool=DHCP_LOCAL interface=LAN lease-time=2h name=dhcp1
/routing table
add disabled=no fib name=to-chr
/ipv6 settings
set accept-router-advertisements=yes
/interface list member
add interface=Freebox list=WAN
/ip address
add address=192.168.88.1/24 comment="default configuration" interface=Freebox network=192.168.88.0
add address=172.30.4.1/30 interface=GAN-VPS network=172.30.4.0
add address=10.0.0.1/21 interface=LAN network=10.0.0.0
add address=172.30.5.1 interface=LAN network=x.x.121.67
add address=172.30.5.1 interface=LAN network=x.x.121.68
add address=172.30.5.1 interface=LAN network=x.x.121.69
add address=172.30.5.1 interface=LAN network=x.x.121.70
add address=172.30.5.1 interface=LAN network=x.x.121.71
add address=172.30.5.1 interface=LAN network=x.x.121.72
add address=172.30.5.1 interface=LAN network=x.x.121.73
add address=172.30.5.1 interface=LAN network=x.x.121.74
add address=172.30.5.1 interface=LAN network=x.x.121.75
add address=172.30.5.1 interface=LAN network=x.x.121.77
add address=172.30.5.1 interface=LAN network=x.x.121.78
add address=172.30.5.1 interface=LAN network=x.x.121.82
add address=172.30.5.1 interface=LAN network=x.x.121.83
add address=172.30.5.1 interface=LAN network=x.x.121.84
add address=172.30.5.1 interface=LAN network=x.x.121.85
add address=172.30.5.1 interface=LAN network=x.x.121.86
add address=172.30.5.1 interface=LAN network=x.x.121.87
add address=172.30.5.1 interface=LAN network=x.x.121.88
add address=172.30.5.1 interface=LAN network=x.x.121.89
add address=172.30.5.1 interface=LAN network=x.x.121.90
add address=172.30.5.1 interface=LAN network=x.x.121.91
add address=172.30.5.1 interface=LAN network=x.x.121.93
add address=172.30.5.1 interface=LAN network=x.x.121.94
add address=172.30.5.1 interface=LAN network=x.x.121.114
add address=172.30.5.1 interface=LAN network=x.x.121.115
add address=172.30.5.1 interface=LAN network=x.x.121.116
add address=172.30.5.1 interface=LAN network=x.x.121.117
add address=172.30.5.1 interface=LAN network=x.x.121.118
add address=172.30.5.1 interface=LAN network=x.x.121.119
add address=172.30.5.1 interface=LAN network=x.x.121.120
add address=172.30.5.1 interface=LAN network=x.x.121.121
add address=172.30.5.1 interface=LAN network=x.x.121.122
add address=172.30.5.1 interface=LAN network=x.x.121.123
add address=172.30.5.1 interface=LAN network=x.x.121.124
add address=172.30.5.1 interface=LAN network=x.x.121.125
add address=172.30.5.1 interface=LAN network=x.x.121.126
add address=172.30.5.1 interface=LAN network=x.x.189.146
add address=172.30.5.1 interface=LAN network=x.x.189.147
add address=172.30.5.1 interface=LAN network=x.x.189.148
add address=172.30.5.1 interface=LAN network=x.x.189.149
add address=172.30.5.1 interface=LAN network=x.x.189.150
add address=172.30.5.1 interface=LAN network=x.x.189.151
add address=172.30.5.1 interface=LAN network=x.x.189.152
add address=172.30.5.1 interface=LAN network=x.x.189.153
add address=172.30.5.1 interface=LAN network=x.x.189.154
add address=172.30.5.1 interface=LAN network=x.x.189.155
add address=172.30.5.1 interface=LAN network=x.x.189.156
add address=172.30.5.1 interface=LAN network=x.x.189.157
add address=172.30.5.1 interface=LAN network=x.x.189.158
add address=172.30.5.1 interface=LAN network=x.x.189.162
add address=172.30.5.1 interface=LAN network=x.x.189.163
add address=172.30.5.1 interface=LAN network=x.x.189.164
add address=172.30.5.1 interface=LAN network=x.x.189.165
add address=172.30.5.1 interface=LAN network=x.x.189.166
add address=172.30.5.1 interface=LAN network=x.x.189.167
add address=172.30.5.1 interface=LAN network=x.x.189.168
add address=172.30.5.1 interface=LAN network=x.x.189.169
add address=172.30.5.1 interface=LAN network=x.x.189.170
add address=172.30.5.1 interface=LAN network=x.x.189.171
add address=172.30.5.1 interface=LAN network=x.x.189.172
add address=172.30.5.1 interface=LAN network=x.x.189.173
add address=172.30.5.1 interface=LAN network=x.x.189.174
add address=172.30.5.1 interface=LAN network=x.x.77.237
add address=172.30.5.1 interface=LAN network=x.x.77.238
add address=172.30.5.1 interface=LAN network=x.x.121.157
add address=172.30.5.1 interface=LAN network=x.x.121.158
add address=172.30.5.1 interface=LAN network=x.x.121.66
add address=172.30.5.1 interface=LAN network=x.x.121.92
/ip arp
add address=x.x.189.167 interface=LAN mac-address=BC:24:11:17:40:BE
/ip dhcp-client
add interface=Freebox
/ip dhcp-server config
set store-leases-disk=2h
/ip dhcp-server network
add address=10.0.0.0/21 dns-server=8.8.8.8,1.1.1.1 gateway=10.0.0.1
/ip dns
set servers=10.0.0.1,8.8.8.8,8.8.4.4,2001:4860:4860::8888,2001:4860:4860::8844
/ip firewall mangle
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.67 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.67
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.68 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.68
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.69 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.69
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.70 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.70
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.71 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.71
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.72 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.72
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.73 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.73
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.74 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.74
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.75 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.75
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.77 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.77
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.78 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.78
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.82 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.82
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.83 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.83
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.84 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.84
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.85 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.85
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.86 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.86
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.87 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.87
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.88 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.88
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.89 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.89
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.90 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.90
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.91 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.91
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.92 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.92
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.93 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.93
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.94 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.94
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.114 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.114
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.115 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.115
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.116 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.116
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.117 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.117
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.118 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.118
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.119 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.119
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.120 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.120
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.121 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.121
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.122 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.122
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.123 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.123
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.124 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.124
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.125 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.125
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.126 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.126
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.146 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.146
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.147 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.147
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.148 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.148
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.149 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.149
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.150 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.150
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.151 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.151
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.152 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.152
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.153 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.153
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.154 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.154
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.155 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.155
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.156 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.156
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.157 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.157
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.158 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.158
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.162 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.162
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.163 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.163
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.164 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.164
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.165 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.165
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.166 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.166
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.167 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.167
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.168 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.168
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.169 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.169
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.170 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.170
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.171 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.171
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.172 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.172
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.173 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.173
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.189.174 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.189.174
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.77.237 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.77.237
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.77.238 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.77.238
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.157 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.157
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.158 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.158
add action=mark-connection chain=prerouting connection-mark=no-mark dst-address=x.x.121.66 in-interface=GAN-VPS new-connection-mark=server-public passthrough=no
add action=mark-connection chain=prerouting connection-mark=no-mark new-connection-mark=server-public passthrough=yes src-address=x.x.121.66
add action=mark-routing chain=prerouting connection-mark=server-public in-interface=LAN new-routing-mark=to-chr passthrough=no
/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN
/ip route
add disabled=no dst-address=172.30.4.2/32 gateway=172.30.4.1 routing-table=main suppress-hw-offload=no
add dst-address=0.0.0.0/0 gateway=GAN-VPS routing-table=to-chr
/ipv6 route
add disabled=no dst-address=x.x:f60b:7d90::/64 gateway=x.x0:8:a8::1 routing-table=main
add disabled=no dst-address=x.x0:8:a8::/64 gateway="" routing-table=main
add disabled=no dst-address=x.x:f60b:7d90::/64 gateway=x.x0:8:a8::1 routing-table=main
add disabled=no dst-address=x.x0:8:a8::/64 gateway="" routing-table=main
/ip service
set telnet disabled=yes
set ftp disabled=yes
set ssh disabled=yes
set www-ssl certificate=letsencrypt-autogen_2024-04-17T09:29:52Z disabled=no
set api disabled=yes
set api-ssl disabled=yes
/ip upnp
set enabled=yes
/ip upnp interfaces
add interface=Freebox type=external
add interface=LAN type=internal
/ipv6 address
add address=x.xa61:110::2 interface=Freebox
add address=x.xa61:111::2 interface=LAN
add address=x.xa61:112::2 interface=LAN
add address=x.xa61:113::2 interface=LAN
add address=x.xa61:114::2 interface=LAN
add address=x.xa61:115::2 interface=LAN
add address=x.xa61:116::2 interface=LAN
add address=x.xa61:117::2 interface=LAN
add address=x.x0:8:a8:4567:d107:0:2 interface=Freebox
On CHR Router
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
/interface ipip
add allow-fast-path=no local-address=xxx.xxx.xxx.197 name=GAN-VPS remote-address=\
82.66.3.60
/disk
set slot1 slot=slot1
set slot2 slot=slot2
set slot3 slot=slot3
set slot4 slot=slot4
set slot5 slot=slot5
set slot6 slot=slot6
set slot7 slot=slot7
set slot8 slot=slot8
set slot9 slot=slot9
set slot10 slot=slot10
set slot11 slot=slot11
set slot12 slot=slot12
set slot13 slot=slot13
set slot14 slot=slot14
set slot15 slot=slot15
set slot16 slot=slot16
set slot17 slot=slot17
set slot18 slot=slot18
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip smb users
set [ find default=yes ] disabled=yes
/user group
add name=prometheus policy="read,test,winbox,api,!local,!telnet,!ssh,!ftp,!reboot\
,!write,!policy,!password,!web,!sniff,!sensitive,!romon,!rest-api"
/interface bridge port
add bridge=*6 interface=*5
add bridge=*6 interface=ether1
/ip firewall connection tracking
set udp-timeout=10s
/ip address
add address=45.xxx.xxx.197/24 interface=ether1 network=45.xxx.xxx.0
add address=172.30.4.2/30 interface=GAN-VPS network=172.30.4.0
/ip arp
add address=x.x.x..66 interface=ether1 published=yes
add address=x.x.x..67 interface=ether1 published=yes
add address=x.x.x..68 interface=ether1 published=yes
add address=x.x.x..69 interface=ether1 published=yes
add address=x.x.x..70 interface=ether1 published=yes
add address=x.x.x..71 interface=ether1 published=yes
add address=x.x.x..72 interface=ether1 published=yes
add address=x.x.x..73 interface=ether1 published=yes
add address=x.x.x..74 interface=ether1 published=yes
add address=x.x.x..75 interface=ether1 published=yes
add address=x.x.x..76 interface=ether1 published=yes
add address=x.x.x..77 interface=ether1 published=yes
add address=x.x.x..78 interface=ether1 published=yes
add address=x.x.x..157 interface=ether1 published=yes
add address=x.x.x..158 interface=ether1 published=yes
add address=x.x.x..82 interface=ether1 published=yes
add address=x.x.x..83 interface=ether1 published=yes
add address=x.x.x..84 interface=ether1 published=yes
add address=x.x.x..85 interface=ether1 published=yes
add address=x.x.x..86 interface=ether1 published=yes
add address=x.x.x..87 interface=ether1 published=yes
add address=x.x.x..88 interface=ether1 published=yes
add address=x.x.x..89 interface=ether1 published=yes
add address=x.x.x..90 interface=ether1 published=yes
add address=x.x.x..91 interface=ether1 published=yes
add address=x.x.x..92 interface=ether1 published=yes
add address=x.x.x..93 interface=ether1 published=yes
add address=x.x.x..94 interface=ether1 published=yes
add address=x.x.x..114 interface=ether1 published=yes
add address=x.x.x..115 interface=ether1 published=yes
add address=x.x.x..116 interface=ether1 published=yes
add address=x.x.x..117 interface=ether1 published=yes
add address=x.x.x..118 interface=ether1 published=yes
add address=x.x.x..119 interface=ether1 published=yes
add address=x.x.x..120 interface=ether1 published=yes
add address=x.x.x..121 interface=ether1 published=yes
add address=x.x.x..122 interface=ether1 published=yes
add address=x.x.x..123 interface=ether1 published=yes
add address=x.x.x..124 interface=ether1 published=yes
add address=x.x.x..125 interface=ether1 published=yes
add address=x.x.x..126 interface=ether1 published=yes
add address=x.x.x..237 interface=ether1 published=yes
add address=x.x.x..238 interface=ether1 published=yes
add address=x.x.x..189.148 interface=ether1 published=yes
add address=x.x.x..189.149 interface=ether1 published=yes
add address=x.x.x..189.150 interface=ether1 published=yes
add address=x.x.x..189.151 interface=ether1 published=yes
add address=x.x.x..189.152 interface=ether1 published=yes
add address=x.x.x..189.153 interface=ether1 published=yes
add address=x.x.x..189.154 interface=ether1 published=yes
add address=x.x.x..189.155 interface=ether1 published=yes
add address=x.x.x..189.156 interface=ether1 published=yes
add address=x.x.x..189.157 interface=ether1 published=yes
add address=x.x.x..189.158 interface=ether1 published=yes
add address=x.x.x..189.162 interface=ether1 published=yes
add address=x.x.x..189.163 interface=ether1 published=yes
add address=x.x.x..189.164 interface=ether1 published=yes
add address=x.x.x..189.165 interface=ether1 published=yes
add address=x.x.x..189.166 interface=ether1 published=yes
add address=x.x.x..189.167 interface=ether1 published=yes
add address=x.x.x..189.168 interface=ether1 published=yes
add address=x.x.x..189.169 interface=ether1 published=yes
add address=x.x.x..189.170 interface=ether1 published=yes
add address=x.x.x..189.171 interface=ether1 published=yes
add address=x.x.x..189.172 interface=ether1 published=yes
add address=x.x.x..189.173 interface=ether1 published=yes
add address=x.x.x..189.174 interface=ether1 published=yes
add address=x.x.x..189.146 interface=ether1 published=yes
add address=x.x.x..189.147 interface=ether1 published=yes
/ip dhcp-client
add interface=ether1
/ip dns
set allow-remote-requests=yes servers=8.8.8.8,8.8.4.4,1.0.0.1,1.1.1.1
/ip ipsec policy
add peer=GAN-VPS tunnel=yes
/ip route
add gateway=45.145.166.1
add dst-address=x.x.x..66/28 gateway=172.30.4.1
add dst-address=x.x.x..67/28 gateway=172.30.4.1
add dst-address=x.x.x..68/28 gateway=172.30.4.1
add dst-address=x.x.x..69/28 gateway=172.30.4.1
add dst-address=x.x.x..70/28 gateway=172.30.4.1
add dst-address=x.x.x..71/28 gateway=172.30.4.1
add dst-address=x.x.x..72/28 gateway=172.30.4.1
add dst-address=x.x.x..73/28 gateway=172.30.4.1
add dst-address=x.x.x..74/28 gateway=172.30.4.1
add dst-address=x.x.x..75/28 gateway=172.30.4.1
add dst-address=x.x.x..76/28 gateway=172.30.4.1
add dst-address=x.x.x..77/28 gateway=172.30.4.1
add dst-address=x.x.x..78/28 gateway=172.30.4.1
add dst-address=x.x.x..157/30 gateway=172.30.4.1
add dst-address=x.x.x..158/30 gateway=172.30.4.1
add dst-address=x.x.x..82/30 gateway=172.30.4.1
add dst-address=x.x.x..83/30 gateway=172.30.4.1
add dst-address=x.x.x..84/30 gateway=172.30.4.1
add dst-address=x.x.x..85/30 gateway=172.30.4.1
add dst-address=x.x.x..86/30 gateway=172.30.4.1
add dst-address=x.x.x..87/30 gateway=172.30.4.1
add dst-address=x.x.x..88/30 gateway=172.30.4.1
add dst-address=x.x.x..89/30 gateway=172.30.4.1
add dst-address=x.x.x..90/30 gateway=172.30.4.1
add dst-address=x.x.x..91/30 gateway=172.30.4.1
add dst-address=x.x.x..92/30 gateway=172.30.4.1
add dst-address=x.x.x..93/30 gateway=172.30.4.1
add dst-address=x.x.x..94/30 gateway=172.30.4.1
add dst-address=x.x.x..114/28 gateway=172.30.4.1
add dst-address=x.x.x..115/28 gateway=172.30.4.1
add dst-address=x.x.x..116/28 gateway=172.30.4.1
add dst-address=x.x.x..117/28 gateway=172.30.4.1
add dst-address=x.x.x..118/28 gateway=172.30.4.1
add dst-address=x.x.x..119/28 gateway=172.30.4.1
add dst-address=x.x.x..120/28 gateway=172.30.4.1
add dst-address=x.x.x..121/28 gateway=172.30.4.1
add dst-address=x.x.x..122/28 gateway=172.30.4.1
add dst-address=x.x.x..123/28 gateway=172.30.4.1
add dst-address=x.x.x..124/28 gateway=172.30.4.1
add dst-address=x.x.x..125/28 gateway=172.30.4.1
add dst-address=x.x.x..126/28 gateway=172.30.4.1
add dst-address=x.x.x..237/30 gateway=172.30.4.1
add dst-address=x.x.x..238/30 gateway=172.30.4.1
add dst-address=x.x.x..189.148/28 gateway=172.30.4.1
add dst-address=x.x.x..189.149/28 gateway=172.30.4.1
add dst-address=x.x.x..189.150/28 gateway=172.30.4.1
add dst-address=x.x.x..189.151/28 gateway=172.30.4.1
add dst-address=x.x.x..189.152/28 gateway=172.30.4.1
add dst-address=x.x.x..189.153/28 gateway=172.30.4.1
add dst-address=x.x.x..189.154/28 gateway=172.30.4.1
add dst-address=x.x.x..189.155/28 gateway=172.30.4.1
add dst-address=x.x.x..189.156/28 gateway=172.30.4.1
add dst-address=x.x.x..189.157/28 gateway=172.30.4.1
add dst-address=x.x.x..189.158/28 gateway=172.30.4.1
add dst-address=x.x.x..189.162/28 gateway=172.30.4.1
add dst-address=x.x.x..189.163/28 gateway=172.30.4.1
add dst-address=x.x.x..189.164/28 gateway=172.30.4.1
add dst-address=x.x.x..189.165/28 gateway=172.30.4.1
add dst-address=x.x.x..189.166/28 gateway=172.30.4.1
add dst-address=x.x.x..189.167/28 gateway=172.30.4.1
add dst-address=x.x.x..189.168/28 gateway=172.30.4.1
add dst-address=x.x.x..189.169/28 gateway=172.30.4.1
add dst-address=x.x.x..189.170/28 gateway=172.30.4.1
add dst-address=x.x.x..189.171/28 gateway=172.30.4.1
add dst-address=x.x.x..189.172/28 gateway=172.30.4.1
add dst-address=x.x.x..189.173/28 gateway=172.30.4.1
add dst-address=x.x.x..189.174/28 gateway=172.30.4.1
add dst-address=x.x.x..189.163/28 gateway=172.30.4.1
add dst-address=x.x.x..66/28 gateway=172.30.4.1
add dst-address=x.x.x..67/28 gateway=172.30.4.1
add dst-address=x.x.x..68/28 gateway=172.30.4.1
add dst-address=x.x.x..69/28 gateway=172.30.4.1
add dst-address=x.x.x..70/28 gateway=172.30.4.1
add dst-address=x.x.x..71/28 gateway=172.30.4.1
add dst-address=x.x.x..72/28 gateway=172.30.4.1
add dst-address=x.x.x..73/28 gateway=172.30.4.1
add dst-address=x.x.x..74/28 gateway=172.30.4.1
add dst-address=x.x.x..75/28 gateway=172.30.4.1
add dst-address=x.x.x..77/28 gateway=172.30.4.1
add dst-address=x.x.x..78/28 gateway=172.30.4.1
add dst-address=x.x.x..82/28 gateway=172.30.4.1
add dst-address=x.x.x..83/28 gateway=172.30.4.1
add dst-address=x.x.x..84/28 gateway=172.30.4.1
add dst-address=x.x.x..85/28 gateway=172.30.4.1
add dst-address=x.x.x..86/28 gateway=172.30.4.1
add dst-address=x.x.x..87/28 gateway=172.30.4.1
add dst-address=x.x.x..88/28 gateway=172.30.4.1
add dst-address=x.x.x..89/28 gateway=172.30.4.1
add dst-address=x.x.x..90/28 gateway=172.30.4.1
add dst-address=x.x.x..91/28 gateway=172.30.4.1
add dst-address=x.x.x..92/28 gateway=172.30.4.1
add dst-address=x.x.x..93/28 gateway=172.30.4.1
add dst-address=x.x.x..94/28 gateway=172.30.4.1
add dst-address=x.x.x..114/28 gateway=172.30.4.1
add dst-address=x.x.x..115/28 gateway=172.30.4.1
add dst-address=x.x.x..116/28 gateway=172.30.4.1
add dst-address=x.x.x..117/28 gateway=172.30.4.1
add dst-address=x.x.x..118/28 gateway=172.30.4.1
add dst-address=x.x.x..119/28 gateway=172.30.4.1
add dst-address=x.x.x..120/28 gateway=172.30.4.1
add dst-address=x.x.x..121/28 gateway=172.30.4.1
add dst-address=x.x.x..122/28 gateway=172.30.4.1
add dst-address=x.x.x..123/28 gateway=172.30.4.1
add dst-address=x.x.x..124/28 gateway=172.30.4.1
add dst-address=x.x.x..125/28 gateway=172.30.4.1
add dst-address=x.x.x..126/28 gateway=172.30.4.1
add dst-address=x.x.x..189.146/28 gateway=172.30.4.1
add dst-address=x.x.x..189.147/28 gateway=172.30.4.1
add dst-address=x.x.x..189.148/28 gateway=172.30.4.1
add dst-address=x.x.x..189.149/28 gateway=172.30.4.1
add dst-address=x.x.x..189.150/28 gateway=172.30.4.1
add dst-address=x.x.x..189.151/28 gateway=172.30.4.1
add dst-address=x.x.x..189.152/28 gateway=172.30.4.1
add dst-address=x.x.x..189.153/28 gateway=172.30.4.1
add dst-address=x.x.x..189.154/28 gateway=172.30.4.1
add dst-address=x.x.x..189.155/28 gateway=172.30.4.1
add dst-address=x.x.x..189.156/28 gateway=172.30.4.1
add dst-address=x.x.x..189.157/28 gateway=172.30.4.1
add dst-address=x.x.x..189.158/28 gateway=172.30.4.1
add dst-address=x.x.x..189.162/28 gateway=172.30.4.1
add dst-address=x.x.x..189.163/28 gateway=172.30.4.1
add dst-address=x.x.x..189.164/28 gateway=172.30.4.1
add dst-address=x.x.x..189.165/28 gateway=172.30.4.1
add dst-address=x.x.x..189.166/28 gateway=172.30.4.1
add dst-address=x.x.x..189.167/28 gateway=172.30.4.1
add dst-address=x.x.x..189.168/28 gateway=172.30.4.1
add dst-address=x.x.x..189.169/28 gateway=172.30.4.1
add dst-address=x.x.x..189.170/28 gateway=172.30.4.1
add dst-address=x.x.x..189.171/28 gateway=172.30.4.1
add dst-address=x.x.x..189.172/28 gateway=172.30.4.1
add dst-address=x.x.x..189.173/28 gateway=172.30.4.1
add dst-address=x.x.x..189.174/28 gateway=172.30.4.1
add dst-address=x.x.x..66/28 gateway=172.30.4.1
add dst-address=x.x.x..67/28 gateway=172.30.4.1
add dst-address=x.x.x..68/28 gateway=172.30.4.1
add dst-address=x.x.x..69/28 gateway=172.30.4.1
add dst-address=x.x.x..70/28 gateway=172.30.4.1
add dst-address=x.x.x..71/28 gateway=172.30.4.1
add dst-address=x.x.x..72/28 gateway=172.30.4.1
add dst-address=x.x.x..73/28 gateway=172.30.4.1
add dst-address=x.x.x..74/28 gateway=172.30.4.1
add dst-address=x.x.x..75/28 gateway=172.30.4.1
add dst-address=x.x.x..77/28 gateway=172.30.4.1
add dst-address=x.x.x..78/28 gateway=172.30.4.1
add dst-address=x.x.x..82/28 gateway=172.30.4.1
add dst-address=x.x.x..83/28 gateway=172.30.4.1
add dst-address=x.x.x..84/28 gateway=172.30.4.1
add dst-address=x.x.x..85/28 gateway=172.30.4.1
add dst-address=x.x.x..86/28 gateway=172.30.4.1
add dst-address=x.x.x..87/28 gateway=172.30.4.1
add dst-address=x.x.x..88/28 gateway=172.30.4.1
add dst-address=x.x.x..89/28 gateway=172.30.4.1
add dst-address=x.x.x..90/28 gateway=172.30.4.1
add dst-address=x.x.x..91/28 gateway=172.30.4.1
add dst-address=x.x.x..92/28 gateway=172.30.4.1
add dst-address=x.x.x..93/28 gateway=172.30.4.1
add dst-address=x.x.x..94/28 gateway=172.30.4.1
add dst-address=x.x.x..114/28 gateway=172.30.4.1
add dst-address=x.x.x..115/28 gateway=172.30.4.1
add dst-address=x.x.x..116/28 gateway=172.30.4.1
add dst-address=x.x.x..117/28 gateway=172.30.4.1
add dst-address=x.x.x..118/28 gateway=172.30.4.1
add dst-address=x.x.x..119/28 gateway=172.30.4.1
add dst-address=x.x.x..120/28 gateway=172.30.4.1
add dst-address=x.x.x..121/28 gateway=172.30.4.1
add dst-address=x.x.x..122/28 gateway=172.30.4.1
add dst-address=x.x.x..123/28 gateway=172.30.4.1
add dst-address=x.x.x..124/28 gateway=172.30.4.1
add dst-address=x.x.x..125/28 gateway=172.30.4.1
add dst-address=x.x.x..126/28 gateway=172.30.4.1
add dst-address=x.x.x..189.146/28 gateway=172.30.4.1
add dst-address=x.x.x..189.147/28 gateway=172.30.4.1
add dst-address=x.x.x..189.148/28 gateway=172.30.4.1
add dst-address=x.x.x..189.149/28 gateway=172.30.4.1
add dst-address=x.x.x..189.150/28 gateway=172.30.4.1
add dst-address=x.x.x..189.151/28 gateway=172.30.4.1
add dst-address=x.x.x..189.152/28 gateway=172.30.4.1
add dst-address=x.x.x..189.153/28 gateway=172.30.4.1
add dst-address=x.x.x..189.154/28 gateway=172.30.4.1
add dst-address=x.x.x..189.155/28 gateway=172.30.4.1
add dst-address=x.x.x..189.156/28 gateway=172.30.4.1
add dst-address=x.x.x..189.157/28 gateway=172.30.4.1
add dst-address=x.x.x..189.158/28 gateway=172.30.4.1
add dst-address=x.x.x..189.162/28 gateway=172.30.4.1
add dst-address=x.x.x..189.163/28 gateway=172.30.4.1
add dst-address=x.x.x..189.164/28 gateway=172.30.4.1
add dst-address=x.x.x..189.165/28 gateway=172.30.4.1
add dst-address=x.x.x..189.166/28 gateway=172.30.4.1
add dst-address=x.x.x..189.167/28 gateway=172.30.4.1
add dst-address=x.x.x..189.168/28 gateway=172.30.4.1
add dst-address=x.x.x..189.169/28 gateway=172.30.4.1
add dst-address=x.x.x..189.170/28 gateway=172.30.4.1
add dst-address=x.x.x..189.171/28 gateway=172.30.4.1
add dst-address=x.x.x..189.172/28 gateway=172.30.4.1
add dst-address=x.x.x..189.173/28 gateway=172.30.4.1
add dst-address=x.x.x..189.174/28 gateway=172.30.4.1
add dst-address=x.x.x..237/30 gateway=172.30.4.1
add dst-address=x.x.x..238/30 gateway=172.30.4.1
add dst-address=x.x.x..157/30 gateway=172.30.4.1
add dst-address=x.x.x..158/30 gateway=172.30.4.1