I have a RB951 running 6.26 (mikrotik A) and a RB2011 running 6.24 (mikrotik B), connected as shown below:
host A — network A — mikrotik A — pptp interface A ---- [ Internet ] ---- pptp interface B — mikrotik B — network B — host B
host A is directly plugged into mikrotik A
mikrotik A is the pptp client
mikrotik B is the pptp server
host B is directly plugged into mikrotik B
The problem:
I cannot ping host B from host A and I cannot ping host A from host B
What works:
I can ping both public IP addresses from either host A or host B
I can ping pptp interface B from pptp interface A (and the other way)
I can ping mikrotik B from mikrotik A (and the other way)
I can ping mikrotik A from host A
I can ping pptp interface A from host A
I can ping pptp interface B from host A
I can ping mikrotik B from host B
I can ping pptp interface B from host B
I can ping pptp interface A from host B
Config:
The firewall is open and forwards any-any
I have a static route on mikrotik A pointing to pptp interface B for subnet network B
I have a static route on mikrotik B pointing to pptp interface A for subnet network A
I’ve tried placing the pptp interfaces on a bridge and have that bridge configured to use proxy-arp. I have proxy-arp enabled on the the LAN interfaces on both mikrotiks. Does not resolve the problem.
Looking at what works,
- if I can ping all the way to the other side of the tunnel (so from host A to pptp interface B)
- and I can ping a machine on the other network from the mikrotik (so from pptp interface A to host B)
- why can’t I ping from host A to host B ?
*update, I can ping from mikrotik A to host B but when I select interface to ping from (bridge which has network A) I get packet loss. Looks like I can only ping host B from mikrotik A when selecting pptp interface A as source.
Question remains the same: looking at what I can ping, the mikrotik seems to know all the networks and the routes but why cant I ping from host A to host B ?