I configure VPN on my router board and firewall NAT rules to pass all traffic through the VPN interface and all things work fine.

When VPN connection got connect to a remote VPN server, we have a local address which if we pass our traffic to it (Firewall => NAT => srcnat), our traffic passes through the VPN.

enter image description here

Now the problem is, every time the VPN got disconnected because of something, the VPN connection may get a different local IP address, and I should reconfigure firewall NAT rule to "srcant" the traffic through this IP.

as you can see in below image this local IP address is defined in "Address List" and is "D (Dynamic) which cause the problem, I can define static address here in "Address List" but I don't know how to force the VPN interface to use it instead of it own generated dynamically IP.

enter image description here



If the server is a Mikrotik, assign a static IP in the "remote address" field for this client in PPP/Secrets menu. If the server is not a Mikrotik, well it depends on the brand, dig around in configuration menus, it should be around client's configuration.


Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.