I’m new to MikroTik and just trying to set up a basic PPTP VPN tunnel to the outside. I’ve spent hours on this but still can’t figure out what’s wrong!
My local setup is the following:
Devices → MikroTik AP (DHCP disabled) → Modem (DHCP server) → Internet
I’m using PIA as VPN provider and as recommended by their walkthrough followed these steps (from https://www.privateinternetaccess.com/helpdesk/guides/other-hardware/mikrotik/mikrotik-pptp-2):
- Set up PPTP client with username/pwd
- Created NAT chain srcnat with out interface pointing to the PPTP client and action Masquerade
- Added a prerouting rule under Firewall->Mangle with action Mark Routing and mark=“PIA PPTP MARK”. Did not specify any Src. address as I want all traffic to be marked
- Added a new route with Gateway=the PPTP interface and routing mark=“PIA PPTP MARK”
- Set the PIA recommended DNS servers in IP->DNS
I’ve set static IP for the router to 192.168.1.201, outside of the DHCP range on the modem (192.168.1.2-192.168.1.200).
Internet connection from a laptop connected to the MikroTik works fine, but it’s still using the original ISP IP address, ie no VPN tunnelling.
I can see the packet counter of the firewall prerouting rule increase correctly (ie I expect all packets to be marked), but the NAT rule shows 0 packets going through.
If I try and ping something like 8.8.8.8 on the PPTP interface, I can observe packets going through both the PPTP interface and the NAT.
Anyone can please help me understand what I’m missing here? Let me know if any screenshot/log is needed.