vpn server with rb5009ug+s+in in iran using starlink

hello

i want to make a vpn server with a restricted network in iran connected to mikrotik rb5009ug+s+in connected to a d-link m920 that acts as range extender of my starlink mini and connect to that server from another location with another restricted network and a mikrotik hap lite or an android phone.

by restricted internet i mean almost complete blacjout internet in iran that we couldnt access even google sevices and only domestic services were working.

i dont know how to do that or if i can do that. im new in this but i have these setups and also i have a bitlaunch wiregaurd and installed 3x-ui on it.

thanks for your help

Running a Starlink with e RB5009 is actually no problem. Using one here.
The antenna needs to be powered by the Starlink router. I have not found a PoE device capable of providing 57V through 2A on 230V ACso far (power required by the antenna powering up). There are some for boats/cars you cann hook up to 12V or 48V batteries. Check the net.
All the networking configuration required by your request is easily done.

As VPN - You could use wireguard - which is IMHO the easiest to use and setup. But the Mikrotik implementation is somewhat broken (through the UI - do it through the CLI and you should be good).
Alternative would be openVPN.

For Wireguard, there are some script-based tunnel configuration generators you can use to handle the client accesses. Check out GitHub - bitcanon/wireguard-tunnel-generator: A simple WireGuard tunnel generation script (to file and QR code) - But you better understand how it works to set it up.

For OpenVPN the howto’s are generally correct.