Community discussions

MikroTik App
 
crs
just joined
Topic Author
Posts: 18
Joined: Wed Mar 10, 2010 10:19 am

PPTP client firewall problem

Fri May 27, 2011 4:32 pm

Hello

I've got MT with two physical interfaces used. ETHER1 - connected to Internet and ETHER2 with few VLAN interfaces setup on it (let's sey they are called VLAN1, VLAN2...). I also have firewall configured to allow or block traffic between VLANS and/or Internet. Now I want to run PPTP server - each connecting client would get IP from our LAN pool (assigned also to VLAN1). I've done everything according to manual and connection works, but I have problem with firewall, because traffic from this connected PPTP client is blocked, as it comes from interface pptp-username instead of VLAN1. I can add rules for this particular interface, exactly the same as for VLAN1, or change existing rules to use addressess pools instead of interface names, but I'm wondering if there's a way to force Mikrotik to treat this connected client exactly the same way as client from VLAN1. I thought about bridging VLAN1 interface with pptp-username (PPP/Profiles - option Bridge) but I wasn't able to configure it properly, possibly due to lack of knowledge.
 
User avatar
mrz
MikroTik Support
MikroTik Support
Posts: 7209
Joined: Wed Feb 07, 2007 12:45 pm
Location: Latvia
Contact:

Re: PPTP client firewall problem

Mon May 30, 2011 3:32 pm

No, you can't force rules configured with one interface to be used on different interface. As you already mentioned use address ranges to block, accept specific traffic. Also there is an option in ppp profile, that adds client's address to address list.