hi
we have vpn remote access l2tp from internet for connect to office
we need when user connect to office white vpn from internet they have internet and office network same time.
how can do it in mikrotik
device that user vpn connect mobile pc windows and android
Re: split tunnel in vpn remote access
L2TP does not support split tunnels. I would suggest to use either ike2 or ike1 + modeconf or OVPN to push routes.
Re: split tunnel in vpn remote access
If your users are on Windows 10 you can use the new PowerShell command-lets for VPN management to get some of this in place.
Something like this could be used to edit the VPN connection named MyFluffyBunny and to add a route for 10.0.0.0/8 that only is made active when the VPN (managed by the OS):
Something like this could be used to edit the VPN connection named MyFluffyBunny and to add a route for 10.0.0.0/8 that only is made active when the VPN (managed by the OS):
Code: Select all
Get-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Set-VpnConnection -SplitTunneling $true
Get-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Add-VpnConnectionRoute -DestionationPrefix 10.0.0.0/8
Re: split tunnel in vpn remote access
Minor typo in your -DestionationPrefix, and corrected below. Otherwise, BRILLIANT! It works great. It's possible home users will have a network/subnet: 192.168.88.0/24 (instead of 10.0.0.0/8)
If your users are on Windows 10 you can use the new PowerShell command-lets for VPN management to get some of this in place.
Something like this could be used to edit the VPN connection named MyFluffyBunny and to add a route for 10.0.0.0/8 that only is made active when the VPN (managed by the OS):
Code: Select allGet-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Set-VpnConnection -SplitTunneling $true Get-VpnConnection | Where-Object -Property Name -EQ "MyFluffyBunny" | Add-VpnConnectionRoute -DestinationPrefix 192.168.88.0/24
Re: split tunnel in vpn remote access
Or just
Code: Select all
Set-VpnConnection -ConnectionName "MyFluffyBunny" -SplitTunneling $true
Add-VpnConnectionRoute -ConnectionName "MyFluffyBunny" -DestinationPrefix "193.110.29.0/27"
-
-
lukman2705
just joined
- Posts: 1
- Joined:
Re: split tunnel in vpn remote access
Hi, is there any ways to configuring split tunneling on mobile phone like android and iphone using vpn in Mikrotik (like ovpn) and how is the configuration for the push route?
Thank you
Thank you