[HELP] Remote access via VPN

RouterOS Beginner Basics
1

Hi I trying to open a port that will allow me to access my MT Haplite device via l2tp VPN.
I have already setup my vpn-server to forward traffic to the port is have specified. tested forwarding using a very simple web server on my PC. works fine

But my problem is that i cannot seem to access any of the service port on my router. I’ve already open port 80/8291 TCP on the Firewall filter. data seems coming in but only a few bytes/packets
yet I cannot get access either web or the winbox. I’m new to MT , maybe something I’ve missed? Thank you.

2

Please attach your config picture and export file.
no worries it`ll be solved

3

Thank you for the reply. I have attached picture my fw filter page. I have already allowed port 80,8192 on the incoming interface list “router-access” which includes the vpn adapter.
I also allowed icmp but i cant ping the vpn ip only its default gateway.

The VPN is setup as a Client acting as gateway for specific traffic. Its NAT/masquerade → Mangle → Routed base on the mangle policy.

What i want to happen it to have a remote access to my router via VPN IP.

SETTINGS:

/ip firewall address-list
add address=192.168.80.66 list=MicroVPN-IP
add address=192.168.254.254 list=MicroVPN-ByP-DST
add address=192.168.80.193 disabled=yes list=MicroVPN-IP
add address=192.168.80.195 list=MicroVPN-IP
add address=192.168.25.0/24 list=MicroVPN-IP
add address=192.168.80.254 list=MicroVPN-ByP-DST
add address=192.168.80.194 list=MicroVPN-IP
add address=192.168.80.0/26 list=MicroVPN-IP
/ip firewall filter
add action=accept chain=input comment=“Remote Winbox” connection-state=new dst-port=21,22,23,80,8291 in-interface-list=Router-Access protocol=tcp
add action=accept chain=input comment=“WAN-VPN [DHCP-Client]” connection-limit=8,32 dst-port=67 in-interface-list=WAN-VPN protocol=udp src-port=68
add action=reject chain=forward comment=“Modem Blocking” dst-address=192.168.254.254 reject-with=icmp-network-unreachable src-address=!192.168.80.0/24
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add action=accept chain=input comment=“INPUT - BASIC UDP Srvc” connection-state=new dst-port=53,68 in-interface-list=LAN-Client-IF protocol=udp
add action=accept chain=input comment=“INPUT - BASIC ICMP” connection-limit=2,32 connection-state=new in-interface-list=Router-Access protocol=icmp
add action=accept chain=input comment=“INPUT [Related, Established]” connection-state=established,related
add action=reject chain=input comment=“DEF INPUT REJECT” reject-with=icmp-host-unreachable
add action=accept chain=forward comment=“Allow [LAN-VPN] NEW connection” connection-state=“” in-interface-list=LAN-Client-IF out-interface-list=WAN-VPN
add action=accept chain=forward comment=“Allow [Hotspot] NEW connection” connection-state=new in-interface=HotSpot01 out-interface-list=WAN-VPN
add action=accept chain=forward comment=“Allow [LAN] establish-related connection” connection-state=established,related
add action=drop chain=forward comment=“DEF - FORWARD” connection-state=“”
add action=drop chain=input comment=“DEF INPUT DROP”
add action=drop chain=forward comment=“defconf: drop all from WAN not DSTNATed” connection-nat-state=!dstnat connection-state=new in-interface-list=WAN
add action=accept chain=output disabled=yes
/ip firewall mangle
add action=mark-routing chain=prerouting dst-address-list=!MicroVPN-ByP-DST new-routing-mark=MicroVPN-US.mk passthrough=yes src-address-list=MicroVPN-IP
/ip firewall nat
add action=passthrough chain=unused-hs-chain comment=“place hotspot rules here” disabled=yes
add action=masquerade chain=srcnat comment=“defconf: masquerade” out-interface-list=WAN
add action=masquerade chain=srcnat comment=VPN-MASQ out-interface-list=VPN-IF
add action=masquerade chain=srcnat comment=“masquerade hotspot network” src-address=192.168.25.0/24
/ip firewall service-port
set irc disabled=yes

/interface list
add comment=defconf name=WAN
add comment=defconf name=LAN
add exclude=dynamic name=discover
add name=mactel
add name=mac-winbox
add name=Router-Access
add name=WAN-VPN
add name=LAN-Client-IF
add comment=VPN-ADAPTER name=VPN-IF
/interface list member
add comment=defconf interface=bridge list=LAN
add comment=defconf interface=ether1-WAN list=WAN
add interface=wlan1 list=discover
add interface=ether2 list=discover
add interface=ether3 list=discover
add interface=ether4 list=discover
add interface=bridge list=discover
add interface=MicroVPN-L2TP list=discover
add interface=HotSpot01 list=discover
add interface=bridge list=mactel
add interface=bridge list=mac-winbox
add comment=“WINBOX Access Interface” interface=MicroVPN-L2TP list=Router-Access
add interface=bridge list=Router-Access
add interface=MicroVPN-L2TP list=WAN-VPN
add interface=ether1-WAN list=WAN-VPN
add interface=bridge list=LAN-Client-IF
add interface=HotSpot01 list=LAN-Client-IF
add interface=MicroVPN-L2TP list=VPN-IF

/ip route
add check-gateway=ping distance=1 gateway=MicroVPN-L2TP routing-mark=MicroVPN-US.mk