IPIP VPN problems

RouterOS General
1

Hi,

I have next configuration and scenario:

MIkrotik 1 ------------------------- MIkrotik2
ETH1: 10.10.10.10 ETH1: 20.20.20.20
ETH2: 192.168.70.1 ETH2: 192.168.7.105
| |
PC1: 192.168.70.5 PC1: 192.168.7.5


MIkrotik 1

interface ipip add name=Tunnel-1 local-address=10.10.10.10 remote-address=20.20.20.20 disabled=no
ip address add address=10.0.0.1/24 interface=Tunnel-1
ip route add dst-address=192.168.7.0/24 gateway=10.0.0.2

Mikrotik 2
interface ipip add name=Tunnel-2 local-address=20.20.20.20 remote-address=10.10.10.10 disabled=no
ip address add address=10.0.0.2/24 interface=Tunnel-2
ip route add dst-address=192.168.70.0/24 gateway=10.0.0.1


I can ping from mikrotik1 mikrotik2 ist work ok.

I can not ping from PC1 to PC2

Please help me :exclamation:

Peter

2

Peter,

Do you have proxy-arp turned on, on those interfaces facing the client pc’s?

Matt

3

Hi MAtt

I have not turned on proxy-arp on interface eth2. I just try turned on but canot ping pc 1 to pc2.

Hi Matt

When i try ping rrom pc1 to pc2 with pacet size 1500 ping it!!!
Where is the problem?

Peter

4

What about from PC1 to ETH2: 192.168.7.105

Regards.

Faton

5

HI

I now try send ping from p1 to pc2 but pacet size 1500 its work ok. But only pecet size bigest 1500.
Where is the problem?

Peter

6

As i understood, you are trying to send packets bigger than 1500 bytes. You won’t be able to do that.

7

Why i dont sending small packet as 1500 bites.

Peter

8

The maximum packet size in IPIP Tunnel is 1480 bytes, 20 bytes are overhead, the packet size larger than 1480 bytes will be fragmented.

Regards.

Faton

9

Hi

I want problem with small packet. When i ping standart packet size 32 bites ping is time out. Only when I ping with packet 1500 ping is response.
Where is the problem?

Peter