Hello,
On mikrotik I have two ISP (dhcp client (main) and ppoe(reserve)) and configured l2tp/ipsec server.
Everything works good, except one thing - when I manually changing to second ISP (reserved channel) for one PC through mangle rule, then can't reach (ping, rdp, etc) this PC from VPN client (outside LAN). But can reach another PCs as usual.
How orginize routes or mangle rules for VPN clients for reaching LAN PCs (ping, rdp, vnc, like in regular LAN) despite the changes of ISP?
Thank you for any advice.

I guess you add routing marks for this PC, correct?
You'll need to add a route to this PC with its new routing mark to work.
like: Edit:
And probably (if even not more likely) a route to the vpn client with that routing mark. This can be accomplished with static addresses in the ppp client definition and a static l2tp server binding.

-Chris

I guess you add routing marks for this PC, correct?
You'll need to add a route to this PC with its new routing mark to work.
like:

Code: Select all

/ip route add dst-address=192.168.88.22 gateway=bridge routing-mark=myWan2-mark

Edit:
And probably (if even not more likely) a route to the vpn client with that routing mark. This can be accomplished with static addresses in the ppp client definition and a static l2tp server binding.

-Chris

Hello, thank you for answer!
Please see https://1drv.ms/u/s!AkiJ7dh7F4kUhIlxBvFCFnYktEJujg, I can't make it work through Routes.

Anyone?