Send traffic through VPN

nicolasecc · Mon Apr 16, 2018 10:18 pm

Dear all
I have 1 DSL pppoe and a PPTP VPN connected through that
I want send some ip's from mangle ip-list through VPN
please help to configure it
please give me complete instruction

womentake · Mon Apr 16, 2018 10:23 pm

It may help.

root@OpenWrt:~# ifconfig
br-lan Link encap:Ethernet HWaddr 08:00:27:0E:CF:19
inet addr:192.168.1.1 Bcast:192.168.1.255 Mask:255.255.255.0
inet6 addr: fd93:d43b:534d::1/60 Scope:Global
inet6 addr: fe80::a00:27ff:fe0e:cf19/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:130 errors:0 dropped:0 overruns:0 frame:0
TX packets:139 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:10392 (10.1 KiB) TX bytes:15306 (14.9 KiB)

eth0 Link encap:Ethernet HWaddr 08:00:27:0E:CF:19
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:152 errors:0 dropped:0 overruns:0 frame:0
TX packets:140 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:14368 (14.0 KiB) TX bytes:15632 (15.2 KiB)

eth1 Link encap:Ethernet HWaddr 08:00:27:78:6B:EE
inet addr:10.0.3.15 Bcast:10.0.3.255 Mask:255.255.255.0
inet6 addr: fe80::a00:27ff:fe78:6bee/64 Scope:Link
UP BROADCAST RUNNING MULTICAST MTU:1500 Metric:1
RX packets:246 errors:0 dropped:0 overruns:0 frame:0
TX packets:275 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:1000
RX bytes:33158 (32.3 KiB) TX bytes:32283 (31.5 KiB)

lo Link encap:Local Loopback
inet addr:127.0.0.1 Mask:255.0.0.0
inet6 addr: ::1/128 Scope:Host
UP LOOPBACK RUNNING MTU:65536 Metric:1
RX packets:65 errors:0 dropped:0 overruns:0 frame:0
TX packets:65 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:0
RX bytes:5164 (5.0 KiB) TX bytes:5164 (5.0 KiB)

tun0 Link encap:UNSPEC HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00
inet addr:10.130.3.45 P-t-P:10.128.0.1 Mask:255.255.255.255
UP POINTOPOINT RUNNING NOARP MULTICAST MTU:1500 Metric:1
RX packets:57 errors:0 dropped:0 overruns:0 frame:0
TX packets:57 errors:0 dropped:0 overruns:0 carrier:0
collisions:0 txqueuelen:500
RX bytes:4788 (4.6 KiB) TX bytes:4788 (4.6 KiB)

2frogs · Tue Apr 17, 2018 3:05 pm

https://wiki.mikrotik.com/wiki/Policy_Base_Routing

nicolasecc · Tue Apr 17, 2018 4:18 pm

thanks for your reply
I did it but some sites like youtube is blocked by dns in isp
so it does not work
how can I fix it?
please help
best regards

sdugoten · Tue Apr 17, 2018 4:50 pm

have your router set DNS to 8.8.8.8 ?

nicolasecc · Tue Apr 17, 2018 10:50 pm

Yes i have done but no sucseed
Please help

2frogs · Tue Apr 17, 2018 11:05 pm

have your router set DNS to 8.8.8.8 ?

Also create a static route for 8.8.8.8 to use vpn as gateway.

Most likely your ISP captures and redirects all DNS.

nicolasecc · Wed Apr 18, 2018 10:34 am

you mean
/ip /route
dst address 8.8.8.8
gateway=vpn
right?

if the below situation be:
Most likely your ISP captures and redirects all DNS.
does this help?

2frogs · Wed Apr 18, 2018 1:54 pm

you mean
/ip /route
dst address 8.8.8.8
gateway=vpn

Yes

You may also want to use this DNS only for those devices in address-list. To do so you can either set it manual on each device or redirect it using something like.

/ip firewall nat 
add action=dst-nat chain=dstnat dst-port=53 protocol=tcp src-address-list="my address list" to-addresses=8.8.8.8 to-ports=53
add action=dst-nat chain=dstnat dst-port=53 protocol=udp src-address-list="my address list" to-addresses=8.8.8.8 to-ports=53

Send traffic through VPN

Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Re: Send traffic through VPN

Who is online