VPN SoftEther Forwarding/Setup

RouterOS Beginner Basics
1

Hi,

I have a problem reaching my internal network addresses (webserver) maybe someone is able to help me.

Setup:
Android Phone ← 192.168.40.11 (L2TP/IPSEC) → Softether 192.168.40.0 (DHCP/NAT - Virttual Hub) ← 192.168.40.10 (L2TP) → Mikrotik (L2TP Client, 6.35.2) ↔ internal 192.168.88.12

Now I want to call 192.168.88.12 on Android to access my internal webserver, which does not work I tried several forwarding rules and nothing worked so far. I only can reach MikroTik on 192.168.40.10.

Appreciate your help…

2

On your Mikrotik, check your bridge-local (or interface your LAN is on). There is a setting called Arp, change it to proxy-arp.

Also your android needs a route. Otherwise packets destined to 192.168.88.0/24 will go out the default gateway.

On Android, it’s something like this:
ip route add 192.168.88.0/24 via 192.168.40.10 dev eth0
Not sure if it is persistent though.

This will need to be entered using the terminal emulator app meaning that your phone will need to be rooted.

If it’s not persistent, try adding that line to the end of /etc/init.rc or /init.local.rc, depending on what ROM your phone is running.