L2TP/IPSec VPN

RouterOS Beginner Basics
1

I have just setup a L2TP/IPSec VPN connection on a mikrotik ccr1009-7g router. my vpn network is 10.24.5.0/24. vpn connection is successful but my vpn clients can’t access our application on this vpn network they are on via port 26000. pls how can i make this port accessible to all vpn clients.
Note: if i telnet the public ip on that port 26000 it’s connecting but not connecting on the vpn network.
pls i need help

2

Hi!
For you to get help you would need to explain better what you need and export your configuration.

I struggled with L2TP/IPSEC a few days back and wrote a small tutorial on it in this thread:
http://forum.mikrotik.com/t/creating-l2tp-server/135651/1

I am not 100% sure but I think you did this:

  • defined a subnet/vlan - 10.24.5.0/24
  • put a server/application inside this subnet
  • made your VPN clients get IPs from the same subnet
  • you expect that a VPN client can reach the server because they are in the same subnet, right?

The above is NOT supported!

You need to:

  • put your application in SUBNET A
  • create a pool of IPs and assign it to L2TP clients in SUBNET B
  • create forwarding firewall rules between SUBNET A and SUBNET B

Did I get it right?

3

Yes Techlord. i really appreciate ur help. it’s helpful and i have resovle the issue. thanks very much