Community discussions

MikroTik App
 
evrossen
just joined
Topic Author
Posts: 3
Joined: Tue May 10, 2011 1:50 pm

VPN passthrough setup

Tue May 10, 2011 2:11 pm

Hi,

Am using a routerboard 493 at home. Have some issues using my work laptop with ipsec VPN to correctly connect to work VPN server.

Router is setup using NAT to my ISP. Used to have a Linksys router doing the job correctly when I enable 'VPN Passthrough'. Have been looking on how to setup this feature in the new router but cannot find it.

Does anybody have an example or pointer to how this is done?

Thanks
 
evrossen
just joined
Topic Author
Posts: 3
Joined: Tue May 10, 2011 1:50 pm

Re: VPN passthrough setup

Wed Jun 01, 2011 2:27 pm

I've noticed lots of posts wrt IPsec server on the router and clients behind NAT which is not working correctly. Is this problem also see when connecting to an external IPsec server and laptop behing the 493 router doing NAT?

Like this:

IPsec-server - Internet - 493 (doing NAT) - laptop (IPsec client).

Problem I have is VOIP connection through the IPsec tunnel being o0nly in 1 direction. I can hear the far end but they cannot hear me.

When putting old router back on my ISP link with VPN passthrough enabled it just work fine. Does this mean Linksys does a better job here compaired to ROS?
Last edited by evrossen on Wed Jun 01, 2011 11:56 pm, edited 1 time in total.
 
ditonet
Forum Veteran
Forum Veteran
Posts: 835
Joined: Mon Oct 19, 2009 12:52 am
Location: Europe/Poland/Konstancin-Jeziorna
Contact:

Re: VPN passthrough setup

Wed Jun 01, 2011 4:53 pm

Does this mean Linksys does a better job hear compaired to ROS?
ROS is better :)
In firewall rules allow traffic udp/500, udp/4500, protocols 50 and 51.
In Linksys 'VPN Passthrough' option is a shortcut to these settings, thats all.

HTH,
 
evrossen
just joined
Topic Author
Posts: 3
Joined: Tue May 10, 2011 1:50 pm

Re: VPN passthrough setup

Wed Jun 01, 2011 11:56 pm

Like this?

/ip firewall filter
add action=accept chain=forward disabled=no dst-port=500 protocol=udp
add action=accept chain=forward disabled=no dst-port=4500 protocol=udp
add action=accept chain=forward disabled=no dst-port=49000 protocol=udp
add action=accept chain=forward disabled=no protocol=ipsec-esp
add action=accept chain=forward disabled=no protocol=ipsec-ah

I've added UDP-49000 since that is used in the IPsec setup.
I see counters incrementing on UDP-500 and UDP-49000 rules, but behaviour on the VOIP client is the same (single direction voice).
 
gdelacruz
just joined
Posts: 9
Joined: Mon Oct 23, 2017 4:27 pm

Re: VPN passthrough setup

Wed Oct 25, 2017 4:18 pm

hi, our office is using tp-link vpn router using pptp.

at home i am using mt hap lite ac, but am not able to pass pptp vpn traffic towards my office vpn router using windows 8 os.

how to allow passthrough vpn an mt?

Who is online

Users browsing this forum: saluki and 63 guests