have a rb750 running 4.17
basic setup
MT pptp client to a ddwrt router running server
connect fine but can only ping the remote router pptp server
nothing behind this?
using a standard win vpn connection i can see everything?
Does the Mikrotik client have the appropriate routes in its routing table after you connect?
would you be willing to take a look,
i’ve spent 3 hours so far
supout.txt (283 KB)
Post the output of the commands in my signature.
MMM MMM KKK TTTTTTTTTTT KKK
MMMM MMMM KKK TTTTTTTTTTT KKK
MMM MMMM MMM III KKK KKK RRRRRR OOOOOO TTT III KKK KKK
MMM MM MMM III KKKKK RRR RRR OOO OOO TTT III KKKKK
MMM MMM III KKK KKK RRRRRR OOO OOO TTT III KKK KKK
MMM MMM III KKK KKK RRR RRR OOOOOO TTT III KKK KKK
MikroTik RouterOS 4.17 (c) 1999-2011 http://www.mikrotik.com/
[admin@MikroTik] > /ip address print detail
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; default configuration
address=192.168.88.1/24 network=192.168.88.0 broadcast=192.168.88.255
interface=ether2-local-master actual-interface=ether2-local-master
1 D address=10.0.1.6/24 network=10.0.1.0 broadcast=10.0.1.255
interface=ether1-gateway actual-interface=ether1-gateway
2 D address=10.0.1.105/32 network=10.0.1.50 broadcast=0.0.0.0
interface=pptp-out1 actual-interface=pptp-out1
[admin@MikroTik] > ip route print detail
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
0 ADS dst-address=0.0.0.0/0 gateway=10.0.1.1
gateway-status=10.0.1.1 reachable ether1-gateway distance=1 scope=30
target-scope=10
1 DS dst-address=0.0.0.0/0 gateway=10.0.1.50
gateway-status=10.0.1.50 reachable pptp-out1 distance=1 scope=30
target-scope=10
2 ADC dst-address=10.0.1.0/24 pref-src=10.0.1.6 gateway=ether1-gateway
gateway-status=ether1-gateway reachable distance=0 scope=10
3 S dst-address=10.0.1.0/24 gateway=pptp-out1
gateway-status=pptp-out1 reachable distance=1 scope=30
target-scope=10
4 ADC dst-address=10.0.1.50/32 pref-src=10.0.1.105 gateway=pptp-out1
gateway-status=pptp-out1 reachable distance=0 scope=10
5 ADC dst-address=192.168.88.0/24 pref-src=192.168.88.1
gateway=ether2-local-master
gateway-status=ether2-local-master reachable distance=0 scope=10
[admin@MikroTik] > /interface print
Flags: D - dynamic, X - disabled, R - running, S - slave
NAME TYPE MTU L2MTU
0 R ether1-gateway ether 1500 1526
1 R ether2-local-master ether 1500 1524
2 ether3-local-slave ether 1500 1524
3 ether4-local-slave ether 1500 1524
4 ether5-local-slave ether 1500 1524
5 R pptp-out1 pptp-out 1450
[admin@MikroTik] > /ip firewall export
jan/02/1970 00:04:03 by RouterOS 4.17
software id = I1PU-KE1T
/ip firewall connection tracking
set enabled=yes generic-timeout=10m icmp-timeout=10s tcp-close-timeout=10s
tcp-close-wait-timeout=10s tcp-established-timeout=1d
tcp-fin-wait-timeout=10s tcp-last-ack-timeout=10s
tcp-syn-received-timeout=5s tcp-syn-sent-timeout=5s tcp-syncookie=no
tcp-time-wait-timeout=10s udp-stream-timeout=3m udp-timeout=10s
/ip firewall filter
add action=accept chain=input comment="default configuration" disabled=no
protocol=icmp
add action=accept chain=input comment="default configuration"
connection-state=established disabled=no in-interface=ether1-gateway
add action=accept chain=input comment="default configuration"
connection-state=related disabled=no in-interface=ether1-gateway
add action=drop chain=input comment="default configuration" disabled=no
in-interface=ether1-gateway
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" disabled=
no out-interface=ether1-gateway
add action=masquerade chain=srcnat comment="" disabled=no out-interface=
pptp-out1
/ip firewall service-port
set ftp disabled=no ports=21
set tftp disabled=no ports=69
set irc disabled=no ports=6667
set h323 disabled=no
set sip disabled=no ports=5060,5061
set pptp disabled=no
[admin@MikroTik] >
You have a DHCP address on ether1 that is also introducing a static route that is overriding the one out the PPP interface. Unless you’re intending for that to happen remove it via:
/ip dhcp-client { remove [find] }
Then try again. Everything else looks OK.
i made that change, everything started working except the gateway itself , weird the pptp i can ping, but the http gui doesn’t work.
hmm thanks though