How to setup port forwarding for VPN?

ramon82 · Tue May 04, 2010 5:32 pm

I have this network as shown:

I have set port forwarding of port 1723 from Modem to 192.168.1.65 and created PPP username on mikrotik with NAT destnat rule to port forward 5900 (for vnc). I cannot connect to VPN from an external computer and also cannot direclty VNC to the public IP of the modem....both approaches dont work.

Still cant connect...what am I missing please? All I want to do is:

1- Connect via VPN to the two computers from an external computer
2- Be able to VNC direclty to the public IP even without connecting to VPN

Thanks

Chupaka · Tue May 04, 2010 5:47 pm

PPTP is 1723/tcp + gre. just 1723/tcp is not enough

cannot direclty VNC to the public IP of the modem

add port forward for VNC on the modem

ramon82 · Tue May 04, 2010 6:30 pm

ahhh so thats the problem.

ok one dumb question: how do i port forward GRE traffic from modem to mikrotik port?

thanks !

fewi · Tue May 04, 2010 6:47 pm

Depends on the modem. Look up their manual.

ramon82 · Tue May 04, 2010 6:50 pm

Ok I will. But is this a range of ports? TCP or UDP? pls help thanks

fewi · Tue May 04, 2010 7:32 pm

GRE is a protocol (IP/47) on top of IP in its own right, it doesn't have the concept of ports. It exists on top of IP like TCP and UDP do.

hedele · Tue May 04, 2010 7:39 pm

Only very few modems I know can actually forward GRE. Those include cisco 8xx/18xx series routers and Pirelli Broadband modems.
your run-of-the-mill zyxel, netgear or linksys modem can probably not forward GRE.

You could try using L2TP instead, as it is fully UDP based and a single port-forward is enough.
also, the routerOS 5.0 beta versions offer SSTP, which is supported by windows 7 (and probably vista as well).

ditonet · Tue May 04, 2010 10:27 pm

I don't know what your modem is, but maybe is possible to set it in 'bridge' mode, not 'router'.
In this case you can set your routing and firewall rules in one place, on your RB450G.
This could simplify your settings because public IP is on RB450G interface.

Regards, Grzegorz.

ramon82 · Wed May 05, 2010 12:12 pm

Guys my modem is this:

http://www.thomsonbroadbandpartner.com/ ... .php?id=79

I still cant find any reference to GRE

I even port forwarded port 47 from Modem to Mikrotik but still no luck!

Would appreciate if anyone can solve this problem for me!!

ditonet · Wed May 05, 2010 1:09 pm

@ramon82

Two months ago I configured ST536 with RB750. ST536 was set to 'bridge' mode, RB750 acts as PPPoE client. Dynamic public IP is assigned by ISP, so DynDNS update script is also configured on RB750. IPSec VPN was also configured and works fine. There wasn't need to configure dst-nat for VNC, but in my opinion VNC is much easier in configuration than IPSec.

Regards, Grzegorz.

ramon82 · Wed May 05, 2010 3:39 pm

I found this link re bridge mode

http://forums.hardwarezone.com.sg/showt ... &t=1511654

But instructions are no longer visible. Can anyone help me to change the modem to bridge mode? also some instructions on how to setup PPOE on mikrotik 450g?

Thanks

ramon82 · Wed May 05, 2010 4:45 pm

This is the config of my modem. Is it already bridged??

http://img12.imageshack.us/img12/4958/n ... re005e.jpg

Onlycut · Wed May 05, 2010 5:29 pm

To be able to use a broadband dial-in application on your computer for connecting
to the Internet, the SpeedTouchTM needs to be configured for Bridged Ethernet or
Routed PPPoE (with PPPoE relay) via the SpeedTouchTM Home Install Wizard on the
Setup CD or the embedded Easy Setup. .

http://www.thomsonbroadbandpartner.com/ ... hp?id=3206
Chapter 3.

This is the config of my modem. Is it already bridged??
http://img12.imageshack.us/img12/4958/n ... re005e.jpg

Still not, on page Internet you're using log & pass, in bridge mode this not used.

upd: additionaly,

OPTIONAL
ulp Select the Upper Layer Protocol (ULP) for this interface.
Choose between:
> ip (for a Routed IPoA interface).
> mac (for a Bridged Ethernet, Routed ETHoA, Bridged PPP over
Ethernet (PPPoE), Routed PPPoE or a PPPoE Relay interface).
> ppp (for a Routed PPP over ATM (PPPoA) interface).
The default is ip.

http://www.thomsonbroadbandpartner.com/ ... hp?id=3265
Chapter 3, ATM commands.
gl.

ramon82 · Wed May 05, 2010 5:48 pm

Ok I will go through setup and change it to bridged.

What about Mikrotik? how can I setup PPPOE?

Onlycut · Wed May 05, 2010 5:57 pm

Ok I will go through setup and change it to bridged.

What about Mikrotik? how can I setup PPPOE?

it's easy.

> /interface pppoe-client add add-default-route=yes interface=eth1-gw user=user password=pass use-peer-dns=yes dial-on-demand=no disabled=no

in wiki:
http://wiki.mikrotik.com/wiki/Manual:In ... oE#Example

ramon82 · Thu May 06, 2010 12:14 pm

Hi again

I changed modem to bridge but now I cant connect to the WWW. I used both 8.35 and 8.48 VCI/VPI settings but no luck. What could I be missing. Its connected like this:

WWW ------ MODEM [Ethernet] ------ Laptop

These are new settings:

ditonet · Thu May 06, 2010 2:15 pm

Hi,

First of all set your's laptop ethernet interface to obtain IP address from DHCP server. Next configure new PPPoE connection on your laptop (user name and password). If you don't know VCI/VPI settings ask your provider, but on attached screenshot looks like DSL link is up and running. With properly configured PPPoE connection you should be able to access Internet.

Regards, Grzegorz.

ramon82 · Thu May 06, 2010 2:18 pm

Ok I ll try that but now I have another problem!!

I am pinging he firewall but I cant connect to it with winbox or the browser. Is there a way how I could hard reset it?

ramon82 · Thu May 06, 2010 2:26 pm

Ok found it

http://wiki.mikrotik.com/wiki/Password_reset

ramon82 · Thu May 06, 2010 2:59 pm

Ok I will go through setup and change it to bridged.

What about Mikrotik? how can I setup PPPOE?
it's easy.
Code: Select all
> /interface pppoe-client add add-default-route=yes interface=eth1-gw user=user password=pass use-peer-dns=yes dial-on-demand=no disabled=no
in wiki:
http://wiki.mikrotik.com/wiki/Manual:In ... oE#Example

Done that but still cant make the laptop connect to the WWW. It works fine if I connect it directly to the modem and create a PPPoE connection on the laptop.

I am working like this:

LAPTOP --- MIKROTIK [ETH1-GW] --- MODEM ---- WWW

ramon82 · Fri May 07, 2010 10:21 am

any help?

ditonet · Fri May 07, 2010 10:43 am

You must configure PPPoE client on your Mikrotik. Here is wiki manual and example:
http://wiki.mikrotik.com/wiki/Manual:In ... PoE_Client
If PPPoE client on your laptop works fine Mikrotik will work too.
Read also 'Onlycut' posts above, it's quiet simple to add PPPoE client.

Regards, Grzegorz.

How to setup port forwarding for VPN?

How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Re: How to setup port forwarding for VPN?

Who is online