Connect RB750G windows VPN, clients too

mautobu · Tue Dec 03, 2013 5:57 pm

I'm having some issues connecting into my work's VPN using my Mitrotik. I can ping successfully to the DC (192.168.20.10) from the router, but not from any of the router's clients. When I torch it, I can see that the DC at work is in fact trying to reply to the ping, but it's not going through.

[mautobu@MikroTik] /interface> print detail
0  R  name="PPTP-client" type="pptp-out" mtu=1350

[mautobu@MikroTik] /ip route> print detail

 0 ADS  dst-address=0.0.0.0/0 gateway=24.68.140.1 gateway-status=24.68.140.1 reachable via  ether1-gateway distance=1 scope=30 target-scope=10 vrf-interface=ether1-gateway 

 1 ADC  dst-address=10.20.1.0/24 pref-src=10.20.1.1 gateway=ether2-master-local gateway-status=ether2-master-local reachable distance=0 scope=10 

 2 ADC  dst-address=24.68.140.0/22 pref-src=24.68.143.113 gateway=ether1-gateway gateway-status=ether1-gateway reachable distance=0 scope=10 

 3 A S  dst-address=192.168.10.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via  PPTP-client distance=1 scope=10 target-scope=10 

 4 ADC  dst-address=192.168.15.254/32 pref-src=192.168.15.201 gateway=PPTP-client gateway-status=PPTP-client reachable distance=0 scope=10 

 5 A S  dst-address=192.168.20.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via  PPTP-client distance=1 scope=10 target-scope=10

[mautobu@MikroTik] /ip firewall filter> print detail
 0   ;;; default configuration
     chain=input action=accept protocol=icmp 

 1   ;;; default configuration
     chain=input action=accept connection-state=established 

 2   ;;; default configuration
     chain=input action=accept connection-state=related 

 3   ;;; default configuration
     chain=input action=drop in-interface=ether1-gateway

aaronhun22 · Thu Dec 05, 2013 2:27 am

Try setting proxy-arp on your pptp-client interface. When I setup PPTP servers on Mikrotik I have to enable the proxy-arp on the routers bridge so that clients can reach devices other than the router.

mautobu · Thu Dec 05, 2013 4:08 am

I can't see an option in command line to change the pptp-client arp settings. I tried

/interface pptp-client set pptp-client arp=proxy-arp

as well as the ethernet ports with no luck. Can you give me the command you use to enable it? I'm on v6.0rc6

aaronhun22 · Fri Dec 06, 2013 10:08 pm

Sorry, proxy-arp has to go on an interface or a bridge. Try setting it on the bridge your connected to.

interface bridge set arp=proxy-arp

Connect RB750G windows VPN, clients too

Connect RB750G windows VPN, clients too

Re: Connect RB750G windows VPN, clients too

Re: Connect RB750G windows VPN, clients too

Re: Connect RB750G windows VPN, clients too

Who is online