Hello guys, I successfully established site to site connection with PPTP. On Site 1 I have pptp server with lan 192.168.2.0/24 (Site 1 is also connected with IPsec tunnel to lets say site 3 with mikrotik-mikrotik, that is working fine, just for the records lan of site 3 is 192.168.0.0/24), on site 2 I have lan 192.168.100.0/24. I am able to access from site2 to whole site1 and site3, everything there is fine, but I cant access from site1/site3 to site 2 to anything else than my mikrotik which is PPTP client (so I can access 192.168.2.250 which is remote adress of site 2 router when its connected via VPN to site1), but I cant access for instance to my PC which has 192.168.100.253. Any help? suggestions ? ![]()
check or add the routes.
I’m wrong or pptp link give 1.2.3.4 address and not 1.2.3.4/24?
you moust add on both site 1 & 3:
192.168.100.0/24 reachable by ip of pptp on site2 side.
Here are Screenshots of routes from both sites. I guess site 3 is not important, right ? as its getting routed anyways from NAT


again: YOU MUST ADD THE ROUTE address=192.168.100.0/24 gateway=192.168.2.250 on site 1
I just saw you edited your post in first place, sorry. I did that on site 1 but im still not able to access anything except site’s 2 router (still same, I can access only 192.168.2.250 which is pptp remote ip of mikrotik on site2, but I cant access any pc from site2 lan like 192.168.100.x ).

on site 2 i see mangle for mark routing, have you try to disable that?
on site 2 you must add one rule like address=192.168.2.0/24 gateway=192.168.2.60
but I have just notice: you have used same ip 192.168.2.x to lan and for PPTP, you must use two non-overlapped range.
try to use (and change the routes accordingly) 10.10.10.1 and 10.10.10.2 as IP on secret profile…
- I disabled mangle mark routing and in routes route that uses mark, but still same.
- I already have that route, check it again on picture.
- I read somewhere that I should use local adress same as LAN of router
Anyways I changed all locals of secrets/profiles to 192.168.2.61 and in routes everything where mentioed 192.168.2.60 to 192.168.2.61, everything is still working the same. Should I try to use another subnet like you suggested ? like to set local adress of secrets/profiles to 10.10.10.1 ? And I did not get what you ment by 10.10.10.2 ? Thanks for your help, you are the best, I really need to get this fixed … 
Edit : I tried to change local adress of secrets to 10.10.10.1, but everything is still same
if your LAN are on 192.168.2.0/24, you can not define ANOTHER LAN containing same address interval 192.168.2.0…192.168.2.255,
but you must use another pair of ip, for example on secret you can use as local 10.10.10.1 and on remote 10.10.10.2,
but this last two are only example: simply choice two differents IP address like 192.168.222.1 and 192.168.222.2
at this point one route 192.168.100.0/24 → 10.10.10.2 must defined on site 1 (traduction: for go to 192.168.100.0/24 go throught pptp on site 2)
and 192.168.2.0/24 → 10.10.10.1 must defined on site 2 (traduction: for go to 192.168.2.0/24 go throught pptp on site 1)
Is everything now as you said ? If yes, Im still getting the same results + now I cant access/ping site 3 from site 2, I dont know why ![]()


If I make possible to see now site 3 from site 2 it might work I guess.. ![]()
I do not know why is not working, but now I see correct routing on the picture, but is very hard to help on this way,
I hope you find the soluction or one more illuminated user can guide you to the solution.
Best Regards.
I must figure it out why I cant ping site3, than I guess Its gonna work. thanks for your help anyways! ![]()