Guys, made some tests and I can´t connect my office to another office…
I think I did everything correct. But when I try to ping any machine in the other side, it´s impossible!
There is no error in the log, but doesn´t work!
Any suggestions ? log is attached…
export is here (some IP´s are hidden)
/interface ethernet
set 0 name=ether1-Link1
set 1 name=ether2-master-local
set 2 master-port=ether2-master-local name=ether3-slave-local
set 3 master-port=ether2-master-local name=ether4-slave-local
set 4 master-port=ether2-master-local name=ether5-slave-local
/interface vlan
add interface=ether1-Link1 l2mtu=1516 name=vLanTelefonica vlan-id=10
/interface pppoe-client
add add-default-route=yes dial-on-demand=yes disabled=no interface=
vLanTelefonica name=TelefoniaPPPoE password=YYYYYYYYYYY user=
XXXXXXXXXXXXXX@XXXXXXXXXXXXXXX.com/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip pool
add name=Pool-CV-Office ranges=192.168.30.10-192.168.30.254
add name=Pool-VPN ranges=172.0.0.2-172.0.0.10
/ip dhcp-server
add add-arp=yes address-pool=Pool-CV-Office always-broadcast=yes disabled=no
interface=ether2-master-local name=Dhcp-CV-Office
/port
set 0 name=serial0
/ppp profile
add local-address=172.0.0.1 name=profile1-vpn-cv only-one=yes remote-address=
Pool-VPN
/tool user-manager customer
add backup-allowed=yes disabled=no login=admin password=“”
paypal-accept-pending=no paypal-allowed=no paypal-secure-response=no
permissions=owner signup-allowed=no time-zone=-00:00
/interface pptp-server server
set authentication=pap,chap,mschap1,mschap2 enabled=yes
/ip address
add address=192.168.30.1/24 comment=“default configuration” interface=
ether2-master-local network=192.168.30.0
/ip arp
add address=192.168.30.5 comment=“Imp OfficeJet276dw” interface=
ether2-master-local mac-address=88:51:FB:13:19:6C
add address=192.168.30.6 comment=“Imp OfficeJet7500A” interface=
ether2-master-local mac-address=10:60:4B:DF:A7:44
add address=192.168.30.3 comment=“Servidor DELL R420” interface=
ether2-master-local mac-address=F0:1F:AF:D3:61:48
add address=192.168.30.247 comment=“Servidor Pedro” interface=
ether2-master-local mac-address=00:1D:60:DD:4F:80
add address=192.168.30.2 comment=“Switch Dell PowerConnect 2428” interface=
ether2-master-local mac-address=D0:67:E5:C5:9C:3D
add address=192.168.30.7 comment=WirelessTelefonica interface=
ether2-master-local mac-address=78:54:2E:29:C7:2D
/ip dhcp-server alert
add alert-timeout=10m disabled=no interface=ether1-Link1
add alert-timeout=10m disabled=no interface=ether2-master-local
/ip dhcp-server lease
add address=192.168.30.5 client-id=1:88:51:fb:13:19:6c comment=
“Imp OfficeJet276dw” mac-address=88:51:FB:13:19:6C server=Dhcp-CV-Office
add address=192.168.30.6 client-id=1:10:60:4b:df:a7:44 comment=
“Imp OfficeJet7500A” mac-address=10:60:4B:DF:A7:44 server=Dhcp-CV-Office
add address=192.168.30.247 client-id=1:0:1d:60:dd:4f:80 comment=
“Servidor Pedro” mac-address=00:1D:60:DD:4F:80 server=Dhcp-CV-Office
add address=192.168.30.100 client-id=1:90:b1:1c:8f:eb:90 comment=Paulo
mac-address=90:B1:1C:8F:EB:90 server=Dhcp-CV-Office
/ip dhcp-server network
add address=192.168.30.0/24 comment=“default configuration” dns-server=
192.168.30.1 gateway=192.168.30.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.30.3
/ip firewall filter
add action=drop chain=input comment=“Drop PING” in-interface=TelefoniaPPPoE
protocol=icmp
add action=drop chain=input comment=“Drop common ports” dst-port=80,443,21,22
in-interface=TelefoniaPPPoE protocol=tcp
/ip firewall nat
add chain=srcnat comment=IPSec dst-address=192.168.40.0/24 src-address=
192.168.30.0/24
add action=masquerade chain=srcnat comment=“default configuration”
add action=masquerade chain=srcnat src-address=172.0.0.0/24
add action=dst-nat chain=dstnat comment=Siecon dst-port=3155 in-interface=
TelefoniaPPPoE protocol=tcp to-addresses=192.168.30.3 to-ports=3155
/ip ipsec peer
add address=XXX.35.XXX.119/32 nat-traversal=yes secret=yyyy
/ip ipsec policy
add dst-address=192.168.40.0/24 sa-dst-address=XXX.35.XXX.119 sa-src-address=
XXX.75.XXX.52 src-address=192.168.30.0/24 tunnel=yes
/ip service
