Community discussions

MikroTik App
 
hidagar
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Wed Mar 04, 2009 5:45 pm

PPTP with windows to RB750

Wed Dec 22, 2010 6:43 pm

Hello,

I'm trying to make a VPN between my office and my laptop. In my office I have a network 10.14.21.0/24 with 10.14.21.1 gateway. RB750 I installed the network with the ip 10.14.21.80/24 port 2. When I connect to the windows PPTP connection makes me correctly, I can ping to the RB750 but not into the net. I need help to enter the rest of the network.

Thanks
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: PPTP with windows to RB750

Wed Dec 22, 2010 6:49 pm

Insert routes to the networks behind the routers via the PPTP tunnel interface IP address on both routers.
 
hidagar
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Wed Mar 04, 2009 5:45 pm

Re: PPTP with windows to RB750

Wed Dec 22, 2010 6:55 pm

Hello,

I instert the routes in the RB, do you mean that I have to put the routes on the ISP router?

Thanks
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: PPTP with windows to RB750

Wed Dec 22, 2010 8:02 pm

I'm apparently unclear on your network layout. Please make a network diagram with all involved devices and their IP addressing.

I suspect that the laptop has an IP address on the VPN that the clients at the office network do not know about. If that is true they would send return traffic back to their default gateway, which doesn't appear to be the RB750. If that is the case you need a route on whatever the default gateway is, pointing the VPN IP address the laptop client has through the RB750, which will then know where to send the traffic.

But without a clear network diagram I'm mostly guessing here.
 
hidagar
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Wed Mar 04, 2009 5:45 pm

Re: PPTP with windows to RB750

Wed Dec 22, 2010 11:07 pm

Hello,

Thanks for the help, this is my diagram.
Drawing1.jpg
You do not have the required permissions to view the files attached to this post.
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: PPTP with windows to RB750

Wed Dec 22, 2010 11:15 pm

I suspect that the laptop has an IP address on the VPN that the clients at the office network do not know about. If that is true they would send return traffic back to their default gateway, which doesn't appear to be the RB750. If that is the case you need a route on whatever the default gateway is, pointing the VPN IP address the laptop client has through the RB750, which will then know where to send the traffic.
What IP addressing is on the PPTP tunnel? What IP address does the client laptop have when you are able to ping the RB750?
 
hidagar
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Wed Mar 04, 2009 5:45 pm

Re: PPTP with windows to RB750

Wed Dec 22, 2010 11:25 pm

I suspect that the laptop has an IP address on the VPN that the clients at the office network do not know about. If that is true they would send return traffic back to their default gateway, which doesn't appear to be the RB750. If that is the case you need a route on whatever the default gateway is, pointing the VPN IP address the laptop client has through the RB750, which will then know where to send the traffic.
What IP addressing is on the PPTP tunnel? What IP address does the client laptop have when you are able to ping the RB750?
The ip addres on the tunnel is 10.0.0.1 in local and 10.0.0.2 on remote. The laptop have 192.168.10.0/24 in that network but it sholud work in all networks type like 192.168.0.0, 192.168.1.0 ...


Thanks
 
fewi
Forum Guru
Forum Guru
Posts: 7717
Joined: Tue Aug 11, 2009 3:19 am

Re: PPTP with windows to RB750

Wed Dec 22, 2010 11:52 pm

On the router configured for 10.14.21.1/24 insert a static route for 10.0.0.2/32 via 10.14.21.80, or source NAT the traffic from the client (10.0.0.2) on the RouterBOARD to 10.14.21.80.

The remote client can send traffic to the machines on the office network just fine. That traffic gets to the office machines as sourced from 10.0.0.2. The office machines look at their IP addressing and realize that 10.0.0.2 isn't on their local network, so they send the reply to their default gateway at 10.14.21.1. That router looks at the packet and either decides to throw it away since private addresses shouldn't go on the public Internet, or sends it to your ISP which throws it away for you - depending on how smart that router is.
When you insert a static route on that network's default gateway it will see the destination address of 10.0.0.2, and have a more specific route for the packet and send it to the RouterBOARD. That RouterBOARD then in turn actually knows how to send packets back to 10.0.0.2 via the PPTP tunnel.

Alternatively you can NAT the packet from the remote client to the office network to 10.14.21.80. Office machines would then see the traffic as originating from 10.14.21.80 (which means you cannot log the true IP of the remote client anymore - one downside to NAT) and send replies straight back to the RouterBOARD, which would then undo the NAT operation and rewrite the destination back to 10.0.0.2 and forward the packet via the tunnel.

Hope that helps.
 
hidagar
Frequent Visitor
Frequent Visitor
Topic Author
Posts: 65
Joined: Wed Mar 04, 2009 5:45 pm

Re: PPTP with windows to RB750

Thu Dec 30, 2010 1:21 pm

Many thansk for your help!

Its working great.

Who is online

Users browsing this forum: DeLL, sstefanov and 128 guests