Soft Ether, 2 внешних адреса и кривые руки

*raw
:PREROUTING ACCEPT [85437:123812808]
:OUTPUT ACCEPT [23147:2348618]

*nat
:PREROUTING ACCEPT [4:210]
:POSTROUTING ACCEPT [4:233]
:OUTPUT ACCEPT [4:233]
-A POSTROUTING -s 192.168.7.0/24 -j SNAT --to-source YYY.YYY.YYY.YYY
-A POSTROUTING -s 192.168.8.0/24 -j SNAT --to-source XXX.XXX.XXX.XXX

*mangle
:PREROUTING ACCEPT [85437:123812808]
:INPUT ACCEPT [85436:123812768]
:FORWARD ACCEPT [1:40]
:OUTPUT ACCEPT [23147:2348618]
:POSTROUTING ACCEPT [23148:2348658]

*filter
:INPUT ACCEPT [85436:123812768]
:FORWARD ACCEPT [1:40]
:OUTPUT ACCEPT [23147:2348618]

#!/bin/bash

DEFGATEWAY=$(ip route show default | awk '/default/ {print $3}')

# Server IP
REMOTEIP=                

# Server ip in subnet
VPNSERVLOCAL=

# Interface
DEFIF=enp3s0

# VPN profile
PROFILE=

# VPN interface 
VPNIF=vpn_se

function start(){
                sudo vpnclient start > /dev/null
                sudo vpncmd localhost /client /cmd accountconnect $PROFILE > /dev/null
                sudo dhclient $VPNIF > /dev/null

                sudo ip route add $REMOTEIP via $DEFGATEWAY dev $DEFIF proto static
                sudo ip route del default
                sudo ip route add default via $VPNSERVLOCAL dev $VPNIF
                echo "Connected"
                }

function stop() {
                sudo vpncmd localhost /client /cmd accountdisconnect $PROFILE > /dev/null
                sudo ip route del default
                sudo ip route add default via $DEFGATEWAY
                sudo ip addr flush dev $VPNIF > /dev/null
                sudo vpnclient stop > /dev/null
                sudo dhclient $DEFIF > /dev/null
                echo "Disconnected"
                }

case $1 in
        'start')
                start
        ;;
        'stop')
                stop
        ;;
        *)
                echo "start | stop"
esac