CHR VPN TRECCANI

# aug/25/2022 06:18:24 by RouterOS 7.4
# software id =
#
/interface bridge
add name=OVPN-bridge
/interface ethernet
set [ find default-name=ether1 ] arp=proxy-arp disable-running-check=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=OVPN-pool ranges=10.100.1.100-10.100.1.250
/port
set 0 name=serial0
set 1 name=serial1
set 2 name=serial2
set 3 name=serial3
/ppp profile
set *FFFFFFFE bridge=OVPN-bridge local-address=10.100.1.1 remote-address=\
    OVPN-pool
/routing bgp template
set default as=65000 disabled=no routing-table=main
/interface ovpn-server server
set auth=sha1,md5 certificate=SERVER cipher=blowfish128,aes128,aes192,aes256 \
    default-profile=default-encryption enabled=yes \
    require-client-certificate=yes
/interface sstp-server server
set enabled=yes tls-version=only-1.2
/ip address
add address=10.100.1.1/24 interface=OVPN-bridge network=10.100.1.0
/ip dhcp-client
add interface=ether1
/ip dns
set servers=8.8.8.8
/ip firewall filter
add action=accept chain=input comment="OVPN pass" dst-port=1194 protocol=tcp
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=netmap chain=dstnat disabled=yes dst-address=10.10.150.0/24 \
    to-addresses=192.168.2.0/24
/ip route
add comment="SSTP TUNNEL NETMAP" disabled=no distance=1 dst-address=\
    10.10.100.0/24 gateway=10.250.1.2 pref-src=0.0.0.0 routing-table=main \
    scope=30 suppress-hw-offload=no target-scope=10
add comment="OVPN NETMAP" disabled=yes distance=1 dst-address=10.10.150.0/24 \
    gateway=10.100.1.2 pref-src=0.0.0.0 routing-table=main scope=30 \
    suppress-hw-offload=no target-scope=10
/ip service
set ssh disabled=yes
/ppp secret
add disabled=yes local-address=10.200.1.1 name=treccani.daniele \
    remote-address=10.200.1.2 service=sstp
add disabled=yes local-address=10.200.1.1 name=lab remote-address=10.200.1.3 \
    service=sstp
add name=treccani.sistemi profile=default-encryption remote-address=\
    10.100.1.154
add local-address=10.250.1.1 name=SSTP remote-address=10.250.1.2 service=sstp
/system identity
set name="VPN Treccani"