PPTP and L2TP failing after adding Ipsec with GRE

RouterOS General
1

I recently added Ipsec using GRE tunnel to a running Mikrotik router (remote routers have dynamic WAN IP) that has been serving PPTP and L2TP clients successfully. Now users can connect and ping the gateway (LAN interface of Mikrotik) but cannot ping or access anything beyond that. My assumption is something with my FW but I can’t figure it out. Please have a look an point out anything that may help resolve.

Thanks In Advance!
firewall.rsc (12.5 KB)

2

Hello
in your config i see two src-nat chains with defined src ip
i dont see any other src-nat for vpn clients
try adding a src-nat for vpn clients IPs so they can go beyond your router by srcnating ip address to router’s Public Address

3

Thanks! That worked but I am trying to understand why it worked before I configured for ipsec/gre tunnel