Skip to main content
kraze
New Member
May 25, 2020
Question

How to add static route through L2TP/IPSec into a Mikrotik subnet?

  • May 25, 2020
  • 1 reply
  • 20063 views

Hello. Current situation:

 

Fortiage FG60E (192.168.0.1) is a Windows-like L2TP/IPSec VPN server (interface name is "localVPN") to which all remote clients connect as well as providing an access to local physical clients.

VPN address for FG60E is 192.168.100.130

Currently Mikrotik hEX (192.168.10.1) is connected to it remotely through VPN and has a 192.168.100.131 address. On Mikrotik I've added a static route which leads into 192.168.0.0/24 through 192.168.100.130 and it works well, all local hardware to Fortigate is available to everything remote behind Mikrotik through its 192.168.0.0 range.

 

However I also want remote hardware behind Mikrotik (on a 192.168.10.0 network) being accessible by local computers in the main 192.168.0.0 network

 

However when adding a static route on Fortigate it isn't possible to just set it as "192.168.10.0/255.255.255.0" through "192.168.100.131" because FortiOS says there's no such gateway available - and the only other option is to set "192.168.10.0/255.255.255.0" route through the above-mentioned "localVPN" interface - however it doesn't seem to work.

 

Is there any other way to do it?

    1 reply

    oliverthom707
    New Member
    August 11, 2020

     I also want remote hardware behind Mikrotik (on a 192.168.10.0 network) being accessible by local computers in the main 192.168.0.0 network

    evince
    New Member
    October 28, 2020

    Hello, same problem for me, is there any solution please?

     

    Thank you in advance,

    sw2090
    SuperUser
    SuperUser
    October 28, 2020

    just use the vpn interface as gateway interface and don't enter any gateway ip address.

    Then this route will make all traffic that goes to the subnet behind mikrotik go through your vpn.

    Then the Mikrotek will have to take care for further routing AND reverse path.

    Also don't forget about the neccessary policies to allow the trafic to flow :)