Hello, I'm trying to setup VPN access from remote Windows XP clients to an office LAN on a new RB750 running RouterOS 4.10. I've followed various Howtos, for example :

http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP

I can always connect to the VPN okay but can never access clients on the LAN. I've set things up as follows (RB750 WAN interface is connected to Internet via PPPoE, Router LAN IP is 10.48.25.1/24). Whenever the remote Windows client uses the VPN connection as its default gateway, I can even access the Internet through the VPN connection so I know that the connection is working except for connections to any of the LAN machines.

Currently I've set things up as follows, following the above Howto :

1. Create a user :

[admin@Office RB750] /ppp secret> print
Flags: X - disabled
# NAME SERVICE CALLER-ID PASSWORD PROFILE REMOTE-ADDRESS
0 Laptop pptp 123 default 10.48.25.21


2. Enable pptp server

[admin@Office RB750] /interface pptp-server server> print
enabled: yes
max-mtu: 1460
max-mru: 1460
mrru: disabled
authentication: mschap2
keepalive-timeout: 30
default-profile: default-encryption


3. Set up proxy-arp on LAN interface :

[admin@Office RB750] /interface ethernet> print
Flags: X - disabled, R - running, S - slave
# NAME MTU MAC-ADDRESS ARP MASTER-PORT SWITCH
0 R ;;; WAN
WAN 1500 00:0C:42:7C:CF:B4 enabled
1 R ;;; LAN
Office 1500 00:0C:42:7C:CF:B5 proxy-arp none switch1
2 XS ether3... 1500 00:0C:42:7C:CF:B6 enabled Office switch1
3 XS ether4... 1500 00:0C:42:7C:CF:B7 enabled Office switch1
4 XS ether5... 1500 00:0C:42:7C:CF:B8 enabled Office switch1



This must surely be a very common scenario among Mikrotik users and I've seen a lot similar threads on the topic but not a lot of people reporting succces. Can anyone suggest what I might try to finally get this working? Thanks.

"but can never access clients on the LAN" - by name or IP ?

"but can never access clients on the LAN" - by name or IP ?

Hello Abgar, I've been trying both. I've been using just IP address so far today while testing. Gonna reset the router and start again now. Maybe if I do it enough times I'll get it right

What pool of addresses are you giving them? Is it on a different subnet than the LAN side? If you put the VPN clients on a different subnet, you should be then be able to access them via their IP addresses. You could also try enabling proxy-arp on the LAN interface as I believe that is the other way to make what you are looking to do work.

HI you have to do this step by step.

1) IP pool add name=pptp_pool1 range=xxx.xxx.xxx.xxx/24

2) Then enable pptp server (like this)

interface pptp-server server print
enabled: yes
max-mtu: 1460
max-mru: 1460
mrru: disabled
authentication: mschap1,mschap2
keepalive-timeout: 30
default-profile: default-encryption

3) Secret

ppp secret add name=xxxx password=xxxxxx profile=default serveices=any

4) Profile

* name="default" local-address=xxx.xxx.xxx.x remote-address=pptp_pool use-compression=default use-vj-compression=default
use-encryption=default only-one=default change-tcp-mss=yes

!Important!

Local-address must be the gateway of the pc that you want communicate. or and IP configured in the lan interface in the MK.

Thanks everyone. I hardware reset the router and went through the steps again at :

http://wiki.mikrotik.com/wiki/Manual:In ... ote_Client

This time it worked! So I must have previously changed something that was causing things not to work. Thanks again.