Community discussions

MikroTik App
 
markbreen
just joined
Topic Author
Posts: 6
Joined: Wed Jan 09, 2019 3:44 am

Routes for VPN access

Mon Jan 14, 2019 5:11 am

Hello,

I'm wondering if someone can help with being able to connect to all private IP subnets from the VPN? I am using 172.16.0.0/12 for all my internal infrastructure stuff and then using 10.0.0.0 for my customers and would like to be able to access all of those internal IP's while I'm VPN'd in.

I have VPN setup on 172.31.1.1/24 and am able to connect to VPN no problem but I can't access or ping anything beyond the subnet that VPN is in. I'm thinking I need to add some specific routes to make this happen? Appreciate any input anyone has!

Thanks,
Mark
 
markbreen
just joined
Topic Author
Posts: 6
Joined: Wed Jan 09, 2019 3:44 am

Re: Routes for VPN access

Tue Jan 15, 2019 7:35 am

Update. . .I am able to ping my router now because I set the VPN range lower and widened the subnet to cover the whole 172.16 range. I still can't ssh or get to it over web though. Any ideas?
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: Routes for VPN access

Tue Jan 15, 2019 10:58 am

Hi

Is the vpn server running on the router itself? If so it will know all the networks involved, and you don't need to do anyting there.

Then all that remains is to tell your client OS how to reach these networks. Two options:
* make vpn de default route (with exception of the vpn server itself, so the vpn will keep on working)
* add route entry for each network you want to reach
 
markbreen
just joined
Topic Author
Posts: 6
Joined: Wed Jan 09, 2019 3:44 am

Re: Routes for VPN access

Tue Jan 15, 2019 3:24 pm

Hi

Is the vpn server running on the router itself? If so it will know all the networks involved, and you don't need to do anyting there.

Then all that remains is to tell your client OS how to reach these networks. Two options:
* make vpn de default route (with exception of the vpn server itself, so the vpn will keep on working)
* add route entry for each network you want to reach
Thanks sebastia. Yes the VPN is running on the RB4011. I still can't seem to see the 172.16.5.1/24 network. How do I add a route for VPN to access 172.16.5.1/24? I can repeat that process when I add other networks and VLANs. Thanks!
 
User avatar
sebastia
Forum Guru
Forum Guru
Posts: 1782
Joined: Tue Oct 12, 2010 3:23 am
Location: Antwerp, BE

Re: Routes for VPN access

Tue Jan 15, 2019 3:43 pm

Adding route over VPN on client side, is client OS dependent.

For windows:
route ADD 172.16.0.0 MASK 255.240.0.0  172.31.1.1 METRIC 10
             ^destination      ^mask      ^gateway      

Who is online

Users browsing this forum: Majestic-12 [Bot] and 219 guests