NAT & VPN from local network pc to removed pc

palam · January 3, 2007, 11:24am

With pc a local network I can not through nat connect a mikrotik vpn on the removed address. From the mikrotik it is connected without problems.

P.S. Error 619

sergejs · January 3, 2007, 11:35am

Check that ‘pptp’ and ‘gre’ helpers are enabled on ‘ip firewall service-port’, if NAT is enabled on the router.

palam · January 3, 2007, 12:48pm

On a firewall openly all is transparent, without restrictions

sergejs · January 3, 2007, 12:51pm

If rotuer performs NAT check that particular NAT helpers are enabled.
If router does not perform NAT, than problem is somewhere else (if router does not have any firewall restrictions).
You can try to connect client direclty (before the router), then check how it wokrs.

palam · January 4, 2007, 10:25am

Without a mikrotik works.

normis · January 4, 2007, 10:26am

palam, do you read sergejs suggestions? please read them again, and enable GRE nat helpers in /ip firewall service-port

sergejs · January 4, 2007, 10:27am

Check firewall rules that might block the particular traffic.
Enable ‘pptp’ and ‘gre’ helpers in ‘ip firewall service-port’.

palam · January 4, 2007, 10:49am

What is nat helpers?

sergejs · January 4, 2007, 10:51am

NAT helpers allows to maintain multiple sessions over the router perfoming NAT.
In your case ‘pptp’ and ‘gre’ helpers required.

palam · January 4, 2007, 10:56am

вот блин ничего не пойму…

palam · January 4, 2007, 11:00am

Give on another I shall set a question.

normis · January 4, 2007, 11:01am

v vashem routere napishite “ip firewall service-port” i togda ENTER. potom PRINT. smotrite chto tam napisano i napishite sdes.

palam · January 4, 2007, 11:03am

фу хоть ктото по русски понимает.
сек

palam · January 4, 2007, 11:06am

я по другому задам вопрос. (пользовался переводчиком т.к. англиский не очень хорошо знаю).
проблема вот в чем.
есть сеть с ип 193.239.. и внутреними адресами 192.168.. (в качестве шлюза микротик) и есть ип 85.223.. в качестве шлюза фри. я делаю подключение из сети 192.168.. на ип 85.223.. и пишет эту ошибку.

sergejs · January 4, 2007, 11:11am

Vam nuzno vkljucitj ‘gre’ i 'pptp v
‘ip firewall service-port’,
‘gre’ i ‘pptp’.
Eti stuki pomogajut rabotatj PPTP cerez NAT,
NAT meshaet rabote PPTP tunelej,
eti helperi neobhodimi na MikroTik routere (NAT proishodit na nem sudja po adresam).

Officialnij jazik foruma anglijskij, poetomu zelatelno ispolzovatj ego.

I’m sorry for the unofficial language post in this forum

palam · January 4, 2007, 11:22am

Thanks, all ок

OverLord · January 5, 2007, 12:15am

i have similar problem
what is solution
i enable gre and pptp
what is next

please eng.

bye

normis · January 5, 2007, 8:22am

the only solution was to enable gre and pptp in the service ports menu

OverLord · January 5, 2007, 8:49am

ok, he connect but new problem arive
when I create on my pc game server, he can’t find them!

i create ppp-secrets-add-name- what local address and remote address i must define in options?

when i use blank then vpn connection don’t work, when i put some address then work but no connection in game.

normis · January 5, 2007, 8:50am

you will have to use EoIP in this case (if you like to do lanparty over a tunnel)