Community discussions

MikroTik App
 
User avatar
antefe
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Fri Oct 12, 2007 12:36 pm
Location: Crete-Greece

PPTP

Sun Dec 09, 2007 12:18 am

I've setup a PPTP Server, the problem is that it routes ALL traffic through it, what i mean is that when i am connected, even browsing the web is through the internet connection of the remote router. Any suggestions?
Thanks in advance
 
User avatar
Chupaka
Forum Guru
Forum Guru
Posts: 8712
Joined: Mon Jun 19, 2006 11:15 pm
Location: Minsk, Belarus
Contact:

Re: PPTP

Sun Dec 09, 2007 4:23 pm

in firewall, forbid all traffic not from PPTP
 
User avatar
gustkiller
Member
Member
Posts: 419
Joined: Sat Jan 07, 2006 5:15 am
Location: Brazil
Contact:

Re: PPTP

Sun Dec 09, 2007 7:04 pm

there´s a configuration in the windows vpn client that u have to disable use external gateway, so you will not use the internet conection frmo the concentrator.
 
User avatar
antefe
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Fri Oct 12, 2007 12:36 pm
Location: Crete-Greece

Re: PPTP

Sun Dec 09, 2007 8:46 pm

Is there a way to do what gustkiller is suggesting but from PPTP server side? so that i don't have to setup every pc that uses this connection?
 
User avatar
gmsmstr
Trainer
Trainer
Posts: 983
Joined: Fri Jun 04, 2004 2:22 am
Location: St. Louis, MO
Contact:

Re: PPTP

Mon Dec 10, 2007 4:12 am

This is a reality with the windows VPN client. Other clients you can do quite a bit more. Also, since this is not your default gateway, any networks you have behind your VPN you will have to add entries. Cisco VPN client is configurable to the networks behind your VPN client, and allows you to get to your internet without going though your gateway.

This is the only major issue with the Windows VPN Client. But I believe there are third party options for you.
 
User avatar
normis
MikroTik Support
MikroTik Support
Posts: 26957
Joined: Fri May 28, 2004 11:04 am
Location: Riga, Latvia
Contact:

Re: PPTP

Mon Dec 10, 2007 9:51 am

I've setup a PPTP Server, the problem is that it routes ALL traffic through it, what i mean is that when i am connected, even browsing the web is through the internet connection of the remote router. Any suggestions?
Thanks in advance
wait! isn't this how it's supposed to be? you are creating a tunnel that will encrypt all traffic. if you want other traffic to not-go through the tunnel, you have to manually change routes in the windows machine
 
User avatar
antefe
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Fri Oct 12, 2007 12:36 pm
Location: Crete-Greece

Re: PPTP

Mon Dec 10, 2007 9:56 am

There should be a way... In other routers, not using routeros i've managed to setup OpenVPN and i had no problems with it (obviously using external software, not windows connections). I'm sure that there is a way to solve this issue, maybe by pushing dhcp options ... I'll check it again this evening,if i find out something i'll post it here.
 
User avatar
gmsmstr
Trainer
Trainer
Posts: 983
Joined: Fri Jun 04, 2004 2:22 am
Location: St. Louis, MO
Contact:

Re: PPTP

Mon Dec 10, 2007 5:27 pm

v3 supports openvpn. It really is a function of the PPTP Client. and yap, typically you want to be able to tunnel all traffic to the other end. I understand what he is asking for. he wants stuff that is not going to his private network to just go out to the internet without the tunnel, but with windows PPTP client, I don't know of a way to do this. I have used other PPTP clients out there and yes, basically during deployment of the software you specify what subnets are available behind the VPN tunnel, and thats what it uses as a route.
 
hattmardy
just joined
Posts: 9
Joined: Sat Jun 10, 2006 7:49 pm

Re: PPTP

Mon Dec 10, 2007 10:51 pm

It seems like I read about this once (trying to do it myself :D )...
It seems you can do this with other PPtP servers that use DHCP to assign IPs to users (such as M$ RRAS) because you can set DHCP options to advertise routes, but with Mikrotik I read that you can't do it this way because it doesn't use DHCP to assign IPs to users... just pools.

It's been a while since I looked, maybe I'm wrong?? hopefully :)
 
User avatar
antefe
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 63
Joined: Fri Oct 12, 2007 12:36 pm
Location: Crete-Greece

Re: PPTP

Wed Dec 12, 2007 4:13 pm

It seems like a dead end to me... the main problem is that the mikrotik is installed in a working environment so i can't fool around with v3 rc editions to try out openvpn...
 
 
User avatar
gustkiller
Member
Member
Posts: 419
Joined: Sat Jan 07, 2006 5:15 am
Location: Brazil
Contact:

Re: PPTP

Thu Dec 13, 2007 6:13 pm

in your pptp client configuration go to proprietes/network then TCP/IP
then Advanced , in the general tab , uncheck the "use default gateway in remote network" or something like that coz my windows is in brazilian portuguese. unchecking that option the internet traffic ill use your internet gateway not the vpn gateway