help with PPTP VPN

RouterOS General
1

I setup a vpn and can connect fine. I can access and ping the vpn router but I am not able to get past the router.. config setup below.

VPN Server:
Bridge1: wlan1, wlan2, wlan3, ether1
IP Address: Bridge1 192.168.0.70/16

Client Connection:
Ip Address: 192.168.0.240/24

Ok the client connects fine but the client is not able to go anywhere past the vpn server. What is wrong with my configuration?

2

You need to turn on Proxy Arp on the router local interface.

Regards

Andrew

3

Tried that on the ether1 but failed to work. Do I have to proxy-arp the Bridge itself? And would that cause any issues with the network than?

4

Yes, try proxy arp on the bridge interface. I missed your point that you were bridging all interfaces.

Regards

Andrew

5

Thanks once I turned on proxy-arp worked beautifully.

6

I tried enabling the proxy arp on the lan interface as the post before me stated but I still cant get past the router. I can vpn in just fine and ping the gateway 216.130.250.1 but cant ping any of the customers. That is what I need to do. I want to vpn onto that subnet from home and then run breeze access auto discover to see status of the customer radios. Anyone know what I may be doing wrong? I have allowed 1723 gre and pptp thru firewall. What is wrong? (ps I am not bridged) I can see connecting in ppp and the bytes when I ping etc but no radios?
thanks in advance
Cindy
07:48:50 pptp,ppp,debug,packet <magic 0x21d06255>
07:48:50 pptp,ppp,debug,packet <148.63.138.186>: rcvd LCP EchoRep id=0x3
07:48:50 pptp,ppp,debug,packet <magic 0xa57d6d66>
07:49:08 pptp,debug,packet rcvd Echo-Request from 148.63.138.186
07:49:08 pptp,debug,packet identifier=184549376
07:49:08 pptp,debug,packet sent Echo-Reply to 148.63.138.186
07:49:08 pptp,debug,packet identifier=184549376
07:49:08 pptp,debug,packet result-code=1
07:49:08 pptp,debug,packet error-code=0
07:49:20 pptp,ppp,debug,packet <148.63.138.186>: sent LCP EchoReq id=0x4
07:49:20 pptp,ppp,debug,packet <magic 0x21d06255>
07:49:21 pptp,ppp,debug,packet <148.63.138.186>: rcvd LCP EchoRep id=0x4
07:49:21 pptp,ppp,debug,packet <magic 0xa57d6d66>
07:49:29 pptp,ppp,debug,packet <148.63.138.186>: rcvd LCP TermReq id=0x9
07:49:29 pptp,ppp,debug,packet fm}\A5\00<\CDt\00\00\00\00
07:49:29 pptp,ppp,debug <148.63.138.186>: LCP closed
07:49:29 pptp,ppp,debug <148.63.138.186>: CCP lowerdown
07:49:29 pptp,ppp,debug <148.63.138.186>: IPCP lowerdown
07:49:29 pptp,ppp,debug <148.63.138.186>: IPCP closed
07:49:29 pptp,ppp,info,account john logged out, 672 54979 157669 460 419
07:49:29 pptp,ppp,info,account john logged out, 672 54979 157669 460 419
07:49:29 pptp,ppp,debug,packet <148.63.138.186>: sent LCP TermAck id=0x9
07:49:30 pptp,ppp,debug <148.63.138.186>: LCP timer
07:49:30 pptp,ppp,debug <148.63.138.186>: LCP lowerdown

7

If you have any packet filtering then you need a rule in the Forward chain that allows traffic to/from the PPTP interface and the internal LAN.

Some auto-discovery programs use multicasts to find devices. I don’t know if you can get this to cross the VPN.

Regards

Andrew

8

Thanks Andrew, I cant try it right now but will in a bit.