Page 1 of 1
UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Mon Oct 23, 2017 4:46 pm
by gdelacruz
Hi,
We have an existing PPTP VPN server at my work. This is intended for windows users running outside our office. Everything works even when using mobile internet access, except my own connection at home with an MT router (hap lite ac). From home and using my own internet access and MT router, I am able to ping may office vpn address, but initiating a windows pptp vpn connection through this router has no luck at all. Am I missing some config for my MT router?
Need help, new with MT router...
Thank you and more power.
Thanks in advance
Re: UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Mon Oct 23, 2017 9:37 pm
by CZFan
Without seeing your current Firewall Filter rules, it is very difficult to comment.
If you like, in Terminal issue command "/ip firewall filter print" and post the result here (Removing any sensitive info ;like WAN IP's, etc)
Else look at adding rules in the Firewall Filter Forward chain accepting TCP port 1723 and Protocol 47 (GRE) from LAN to WAN
Re: UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Tue Oct 24, 2017 1:24 am
by gdelacruz
Hi,
This is my only firewall filter:
[admin@GDLC\A7] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept connection-state=established log=no log-prefix=">
1 X ;;; place hotspot rules here
chain=unused-hs-chain action=passthrough
time=23h-23h59m59s,sun,mon,tue,wed,thu,fri,sat log=no log-prefix=""
2 chain=input action=accept protocol=icmp log=no log-prefix=""
3 chain=input action=accept connection-state=related log=no log-prefix=""
4 chain=input action=drop in-interface=P1 SBB
time=0s-23h59m59s,sun,mon,tue,wed,thu,fri,sat log=no log-prefix=""
5 X chain=forward action=accept p2p=all-p2p protocol=tcp
src-address=14.14.14.0/27 dst-address=14.14.14.0/27 hotspot=""
src-port=4899 dst-port=4899 log=yes log-prefix=""
6 ;;; Conficker
chain=forward action=drop protocol=udp dst-port=135 log=no log-prefix=""
7 ;;; Conficker
chain=forward action=drop protocol=udp dst-port=137 log=no log-prefix=""
-- [Q quit|D dump|right|down]
Re: UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Tue Oct 24, 2017 1:30 pm
by Steveocee
So you cannot set up a PPTP from either the router or your computer?
Are you sure the ISP is not blocking PPTP?
You'd have to go out of your way to block PPTP access normally so there is no reason why it shouldn't work straight away.
Re: UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Fri Oct 27, 2017 3:43 pm
by gdelacruz
Hi Steve,
I am not planning to make my MT as a PPTP server nor client. I have my PPTP client running under my windows OS (which I am trying to connect to our PPTP Server located somewhere).
My issue is that I cannot pass my MT using my windows PPTP client, though I am able to ping our PPTP server public ip. Already tried to include TCP and GRE in my firewall filter for both directions yet is not able to connect.
Re: UNABLE TO PASS A PPTP VPN CONNECTION WITH AN MT
Posted: Sat Oct 28, 2017 3:14 pm
by Steveocee
Hi Steve,
I am not planning to make my MT as a PPTP server nor client. I have my PPTP client running under my windows OS (which I am trying to connect to our PPTP Server located somewhere).
My issue is that I cannot pass my MT using my windows PPTP client, though I am able to ping our PPTP server public ip. Already tried to include TCP and GRE in my firewall filter for both directions yet is not able to connect.
I understand, however for testing only. Can you make the PPTP client within your router? Are you sure your ISP allows PPTP across it?