MikroTik

Posted: **Fri Feb 22, 2013 4:50 pm**

Hi all.

I have two offices - office_1 and office_2 in a different cities.

At office_1 I've Windows PPTP server - RRAS IP 192.168.1.180 (pool for remote clients 192.168.1.180-190) (local subnet 192.168.1.0/24).
At office_2 - Mikrotik RB750GL as PPTP client (local subnet 10.20.0.0/16). Users comps are behind the NAT.

RB750GL connects good to Win PPTP server.

I need to make subnets 192.168.1.0/24 and 10.20.0.0/16 to be connected and comps from two subnets could communicate.
----

So, on my Win PPTP server I used route to 10.20.0.0/16 by using gateway 192.168.1.180.

On RB750GL I have:
1. one NAT rule (masquerade) on gateway port for computers in 10.20.0.0/16. Computers use gateway 10.20.0.1 to reach internet.
2. Default gateway to ISP.
3. Dynamic routes which created by router.

#      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 A S  0.0.0.0/0                          192.168.1.180             1
 1 A S  0.0.0.0/0                          109.xx.xx.xx              1
 2 ADC  10.20.0.0/16       10.20.0.1       ether2-master-l...        0
 3 ADC  109.xx.xx.xx/30    109.xx.xx.xx    ether1-gateway            0
 4 A S  192.168.1.0/24                     pptp_client              1
 5 ADC  192.168.1.180/32   192.168.1.181   pptp_client               0

I was trying to connect subnets by marking all traffic to the 192.168.1.0/24 with mangle and setting up route to 0.0.0.0/0 with gw 192.168.1.180.

0   chain=prerouting action=mark-routing new-routing-mark=p2h passthrough=no dst-address=192.168.1.0/24

But, it doesn't work.

Could someone help and show me the way or just right tools to connect subnets.

Thanx.

Posted: **Fri Feb 22, 2013 7:51 pm**

Unless I misunderstood your requirements, you should not need to mangle in order to route across your VPN.

Configure the Win2k PPTP server to dynamically add the endpoint route (10.x.x.x) when the connection is established (This should be available on creation if I remember right, its been a while). But, this needs to route to the client endpoint, not the .180 address of the server itself.

I am assuming you are using a bridge interface in the MikroTik (if not, you can create one):

On the MikroTik side you should have either used the default profile or created a new one for the PPTP client, either way, under that profile you can then select the bridge interface to tie the PPTP client to. This should allow both ends to communicate.

Hope this helps you.

Posted: **Sat Feb 23, 2013 1:58 pm**

Thanx, scotthammersley! I'll try your recommendation.

My task is simple - connect two subnets via pptp.

I've no expiriens with MT before and not all understood (just one week of my practice with MT).

I've tried use mangl, cause I don't know how to send packets between MT interfaces. If I use ping tool on MT console, or use WebFig and choosing pptp-client interface (wich created dinamicaly, when pptp connection is up) - I can ping whole 192.168.1.0/24 subnet. But I can't ping it from other interfaces. I thought routing is enough.

Sorry, if I made you misunderstood.

Will try to create bridge.

MikroTik

Windows PPTP server and Mikrotik PPTP client

Windows PPTP server and Mikrotik PPTP client

Re: Windows PPTP server and Mikrotik PPTP client

Re: Windows PPTP server and Mikrotik PPTP client