Community discussions

MikroTik App
 
zero13th
just joined
Topic Author
Posts: 6
Joined: Fri May 20, 2011 12:11 pm

pptp-client cannot ping gateway

Fri May 20, 2011 1:22 pm

Hi All,
I'm a noob and this is my first post.
I'm struggling with MT pptp-client.
with Linux i can ping gateway and use the Internet
with MT i can connect to poptop pptp-server ('/ip route' says it reachable) but i still cannot ping gateway
and how to route all my traffic into pptp?
please help me
thanks

Image
mikrotik RB750 with RouterOS 5.2
[guest@MikroTik] > interface pptp-client print det
Flags: X - disabled, R - running 
 0  R name="pptp" max-mtu=1460 max-mru=1460 mrru=disabled 
      connect-to=123.234.345.456 user="vpn" password="*************" 
      profile=default-encryption add-default-route=yes dial-on-demand=no 
      allow=chap,mschap2 
==========================
[guest@MikroTik] > /ip address print detail 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; default configuration
     address=192.168.88.1/24 network=192.168.88.0 
     interface=ether2-local-master actual-interface=ether2-local-master 

 1 D address=192.168.144.72/26 network=192.168.144.64 interface=ether1-gateway 
     actual-interface=ether1-gateway 

 2 D address=192.168.31.106/32 network=192.168.31.1 interface=pptp 
     actual-interface=pptp
========================== 
[guest@MikroTik] > ip route print detail 
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 0 ADS  dst-address=0.0.0.0/0 gateway=192.168.144.120 
        gateway-status=192.168.144.120 reachable ether1-gateway distance=1 
        scope=30 target-scope=10 vrf-interface=ether1-gateway 

 1  DS  dst-address=0.0.0.0/0 gateway=192.168.31.1 
        gateway-status=192.168.31.1 reachable pptp distance=1 scope=30 
        target-scope=10 

 2 ADC  dst-address=192.168.31.1/32 pref-src=192.168.31.106 gateway=pptp 
        gateway-status=pptp reachable distance=0 scope=10 

 3 ADC  dst-address=192.168.88.0/24 pref-src=192.168.88.1 
        gateway=ether2-local-master 
        gateway-status=ether2-local-master unreachable distance=0 scope=200 

 4 ADC  dst-address=192.168.144.64/26 pref-src=192.168.144.72 
        gateway=ether1-gateway gateway-status=ether1-gateway reachable 
        distance=0 scope=10 
==========================
[guest@MikroTik] > interface print 
Flags: D - dynamic, X - disabled, R - running, S - slave 
 #     NAME                                        TYPE             MTU   L2MTU
 0  R  ether1-gateway                              ether            1500  1526 
 1     ether2-local-master                         ether            1500  1524 
 2     ether3-local-slave                          ether            1500  1524 
 3     ether4-local-slave                          ether            1500  1524 
 4     ether5-local-slave                          ether            1500  1524 
 5  R  pptp                                        pptp-out         1460 
==========================
[guest@MikroTik] > ip firewall export 
# may/20/2011 16:33:18 by RouterOS 5.2
#
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s \
    tcp-close-wait-timeout=10s tcp-established-timeout=1d \
    tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s \
    tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no \
    tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment="default configuration" disabled=no \
    protocol=icmp
add action=accept chain=input comment="default configuration" \
    connection-state=established disabled=no in-interface=ether1-gateway
add action=accept chain=input comment="default configuration" \
    connection-state=related disabled=no in-interface=ether1-gateway
add action=accept chain=input disabled=no in-interface=ether1-gateway port=22 \
    protocol=tcp
add action=accept chain=input disabled=no in-interface=ether1-gateway port=\
    8291 protocol=tcp
add action=drop chain=input comment="default configuration" disabled=no \
    in-interface=ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" disabled=\
    no out-interface=ether1-gateway
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
[guest@MikroTik] > ping 192.168.31.1 count=3
HOST                                    SIZE  TTL TIME  STATUS                                                                     
192.168.31.1                                            timeout                                                                    
192.168.31.1                                            timeout                                                                    
192.168.31.1                                            timeout                                                                    
    sent=3 received=0 packet-loss=100% 
HOST                                    SIZE  TTL TIME  STATUS                                                                     

[guest@MikroTik] > 
ubuntu pptp-client
pico ~ # ifconfig ppp0
ppp0      Link encap:Point-to-Point Protocol  
          inet addr:192.168.31.103  P-t-P:192.168.31.1  Mask:255.255.255.255
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1400  Metric:1
          RX packets:2969 errors:0 dropped:0 overruns:0 frame:0
          TX packets:3063 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:3 
          RX bytes:2467592 (2.4 MB)  TX bytes:517556 (517.5 KB)

pico ~ # ping -c 3 192.168.31.1
PING 192.168.31.1 (192.168.31.1) 56(84) bytes of data.
64 bytes from 192.168.31.1: icmp_req=1 ttl=64 time=73.4 ms
64 bytes from 192.168.31.1: icmp_req=2 ttl=64 time=63.7 ms
64 bytes from 192.168.31.1: icmp_req=3 ttl=64 time=69.7 ms

--- 192.168.31.1 ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2003ms
rtt min/avg/max/mdev = 63.780/69.014/73.480/4.008 ms
pico ~ # route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.31.1    0.0.0.0         255.255.255.255 UH    0      0        0 ppp0
123.234.345.456 192.168.144.120 255.255.255.255 UGH   0      0        0 wlan0
123.234.345.456 192.168.144.120 255.255.255.255 UGH   0      0        0 wlan0
192.168.144.64  0.0.0.0         255.255.255.192 U     2      0        0 wlan0
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 wlan0
0.0.0.0         0.0.0.0         0.0.0.0         U     0      0        0 ppp0
pico ~ # 
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: pptp-client cannot ping gateway

Fri May 20, 2011 2:29 pm

If you look at your routing table you can easily find that the route which goes out
using your pptp client interface is not active. So you either increase the distance of the
route which uses ether1 as gateway or you just disable it.

Also, in the masquerade rule, change the out-interface from ether1 to ppptp-client
 
zero13th
just joined
Topic Author
Posts: 6
Joined: Fri May 20, 2011 12:11 pm

Re: pptp-client cannot ping gateway

Fri May 20, 2011 3:54 pm

If you look at your routing table you can easily find that the route which goes out
using your pptp client interface is not active. So you either increase the distance of the
route which uses ether1 as gateway or you just disable it.

Also, in the masquerade rule, change the out-interface from ether1 to ppptp-client

Caci99 thanks for the reply :)

i try to change the distance and change the nat, but still rto
[guest@MikroTik] > ip firewall nat print 
Flags: X - disabled, I - invalid, D - dynamic 
 0 X ;;; default configuration
     chain=srcnat action=masquerade out-interface=ether1-gateway 

 1   chain=srcnat action=masquerade out-interface=pptp 
[guest@MikroTik] > ip route print 
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          192.168.31.1       1       
 1  DS  0.0.0.0/0                          192.168.144.120    10       
 2 ADC  192.168.31.1/32    192.168.31.106  pptp               0       
 3 ADC  192.168.88.0/24    192.168.88.1    ether2-local-ma... 0       
 4 ADC  192.168.144.64/26  192.168.144.75  ether1-gateway     0       
[guest@MikroTik] > ping 192.168.31.1 count=3
HOST                                    SIZE  TTL TIME  STATUS                 
192.168.31.1                                            timeout                
192.168.31.1                                            timeout                
192.168.31.1                                            timeout                
    sent=3 received=0 packet-loss=100% 
HOST                                    SIZE  TTL TIME  STATUS                 

[guest@MikroTik] > 
 
zero13th
just joined
Topic Author
Posts: 6
Joined: Fri May 20, 2011 12:11 pm

Re: pptp-client cannot ping gateway

Thu May 26, 2011 2:51 am

downgrading to 4.17 still can't ping gateway.
with pptp-client on windows, ubuntu, Dlink-DIR600, pptp is working normally

am I missing something?
 
User avatar
Caci99
Forum Guru
Forum Guru
Posts: 1076
Joined: Wed Feb 21, 2007 2:26 pm
Location: Tirane
Contact:

Re: pptp-client cannot ping gateway

Thu May 26, 2011 1:49 pm

try to do everything again from scratch. Reset routerboard configuration and don't use the default
configuration after reseting.
 
zero13th
just joined
Topic Author
Posts: 6
Joined: Fri May 20, 2011 12:11 pm

Re: pptp-client cannot ping gateway

Tue May 31, 2011 6:58 am

upgrade to 5.4
reset config with no-default=yes
set ip address wan and lan
set pptp-client
manual route-add

result: pptp connect, but still can't ping gateway
 
zero13th
just joined
Topic Author
Posts: 6
Joined: Fri May 20, 2011 12:11 pm

Re: pptp-client cannot ping gateway

Thu Jun 30, 2011 11:31 am

my freebsd poptop configuration
http://freebsdhowto.com/running-poptop-in-freebsd

need help please

Who is online

Users browsing this forum: GoogleOther [Bot] and 33 guests