EOIP inside PPTP only works with tunnel id 0

RouterOS General
1

Hi,
I’m a beginner with RouterOS. I’ve two RB2011 UiAS-2HnD (SW 6.43.4).
The first RB2011 is connected as lan client to a AVM 7490. The AVM 7490 is connected to internet with a dynamic public ip.
The second RB2011 is connectet via a LTE-Stick with nated ip (no public ip). The second RB2011 get the public ip via dyndns from the first RB2011 internet connection.
The second RB2011 connected to the first RB2011 via PPTP and the EOIP tunnel (tunnel id = 0) inside the PPTP connection successful establish.
The LAN to LAN connection between both RB2011 works perfectly with good data throughput. If I only change the EOIP tunnel id of both RB2011 to a other value e.g. 1, no data throughput between both RB2011 is available.

In a further step I want to connect a third RB2011 to the first RB2011 in the same way. So, as I understood EOIP, I have to choose for each EOIP connection a new unique tunnel id.
I think, that will not work on another EOIP connection with tunnel id e.g. 1.

What is the problem and how do I solve it ?

2

Why you use EOIP inside off legacy and insecure ppptp?

I think the best way is possible to Beginn with that what you want to do…
Ppptp and EOIP creates a big amount of overhead…

3

Thank you mistry7 for your help. In the first step I need a LAN-LAN connection between my RB2011 and a friends (friend 1) RB2011. In the second step I want a common LAN between me, and my both friends (friend 1 + friend 2).

Currently I’ve disable the PPTP encryption and activate the IPSec encryption in EOIP. So, as I understood EOIP, I need two fixed IP’s, or two public (dynamic) ip’s for the EOIP tunnel endpoints. The second RB2011 is behind the lte mobil phone provider nat. It’s not pssible to ping the second RB2011 with the IP of the LTE Interface. So, the second RB2011 must establish the connection to the first RB2011 via PPTP.

If I change my LAN-LAN connection only to EOIP with activated IPSec encryption I need a “local address” and a “remote adress” for both RB2011.
I’m not sure which address I have to enter in the first RB2011 for the “Remote Address” and in the second RB2011 for the “Local Adress”.

What would a better or the best way look like ?

4

A Better solution for you is young L2TB WITH BCP, so you don’t need EOIP Tunnels.

https://www.youtube.com/watch?v=gahPNhbu2VA

5

But still, it would be nice to investigate the issue the OP raised. Bugs always should be considered checking.

6

@mistry7: I carried out the L2TP BCB configuration according to the youtube video. The firewall configuration was missing in the presentation. It was not a problem for me to add this. If IPSec is disabled, the L2TP tunnel is successfully established. Even with this solution, the IPSec configuration needs two fixed IP addresses, so that the connection can be established. In the second RB2011 logfile the IPSEC connection fails at the “local” WAN IP (192.168.8.100), which is not a public IP. For the EOIP configuration, a local and a remote address can be specified for IPSec. In the L2TP solution, only the remote address can be entered for IPSec, the local address is automatically adopted by RouterOS from the WAN address. For the EOIP solution, I used the fixed addresses of the PPTP tunnel endpoints for the IPSec local and remote addresses. I think the solution L2TP BCB will not work for me.

@sup5: According to my current findings EOIP is for me the only solution. I would like to help to find a possible bug. What should I do ?