Community discussions

MikroTik App
 
danypd69
just joined
Topic Author
Posts: 14
Joined: Fri Jun 07, 2013 3:01 pm

VPN cannot ping some hosts

Tue Mar 25, 2014 9:02 pm

Hello, I have a strange problem with a vpn (both openvpn and pptp)

This is my setup

ROUTER: ETH6 = 192.168.100.254, ETH2 = EXTIP1
HOST 1: ETH0 = 192.168.100.30
HOST 2: ETH0 = EXTIP2, ETH1 = 192.168.100.31

EXTIP and EXTIP2 are two internet public addresses

The ethernets are all connected to the same switch

the hosts can communicate among them on any ip address, everything works ok on the local network.
When I connect through the vpn I can ping 192.168.100.30 but cannot ping 192.168.100.31

What can I do to find out what is wrong ?

This is an extract of my router config
/interface ethernet
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] master-port=ether6
/ppp profile
set 0 local-address=192.168.100.254 only-one=no remote-address=VPN-Pool \
    use-ipv6=no
add change-tcp-mss=yes local-address=10.0.0.102 name=openvpnwindows only-one=\
    no remote-address=10.0.0.101 use-ipv6=no
/interface ovpn-server server
set certificate=cert_3 cipher=blowfish128,aes128,aes192,aes256 default-profile=openvpn-win1 enabled=yes
/interface pptp-server server
set enabled=yes
/ip address
add address=192.168.100.254/24 interface=ether6 network=192.168.100.0
add address=EXTIP1/27 interface=ether2 network=77.93.253.224
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip settings
set accept-redirects=yes
/ip firewall filter
add action=reject chain=input dst-address=EXTIP1 dst-address-type="" \
    dst-port=23 fragment=no hotspot="" protocol=tcp reject-with=tcp-reset
add action=reject chain=input dst-address=EXTIP1 dst-address-type="" \
    dst-port=21 fragment=no hotspot="" protocol=tcp reject-with=tcp-reset
/ppp secret
add name=vpn password=xxxxxxxxxxxxxx profile=openvpnwindows remote-ipv6-prefix=::/0 service=ovpn
/system clock
set time-zone-name=Europe/Rome