jethro
July 29, 2012, 9:17am
1
Hi Guys,
In the old situation I have a Ubuntu server with PPTPD deamon running. I created some accounts there with a specified ip address. So when a PPTP client connects he get a real ipv4 address and when I visit whatsmyip.com I see this ip.
I try to accomplish the same with an RB750 now but when I visit whatsmyip.com I see the ip address from the RB750 and not the Remote Address I specified in the secret.
I found a this topic http://forum.mikrotik.com/t/pptp-real-static-ip/46733/1 and I have proxy-arp enabled but still no luck.
Can anyone point me in the right direction? I use a RB750GL with 5.18.
Thanks
vk7zms
July 31, 2012, 6:40am
2
Have you set your default gateway on the RB750 to be via the pptp-client interface? or is it still sending traffic via the WAN interface?
perhaps post pptp-client, ip address and routing config?
jethro
July 31, 2012, 7:58pm
3
Hereby my current config. I have changed my realip’s with 1.1.x.x
Some extra information. This RB750 is connected to my Border router with OSPF and then setup a BGP session and receive the 0/0 from the BGP peer.
With this config I can connect with the PPP user. When I visit then whatsmyip.com it show the ip that is configured on ether1 1.1.168.50 and not 1.1.175.157
[admin@MikroTik] > /export compact
# jan/23/1970 02:18:12 by RouterOS 5.18
/interface ethernet
set 0 arp=proxy-arp
set 1 name=ether2-local-master
set 2 master-port=ether2-local-master name=ether3-local-slave
set 3 master-port=ether2-local-master name=ether4-local-slave
set 4 arp=proxy-arp
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
/ip pool
add name=default-dhcp ranges=192.168.88.10-192.168.88.254
add name=vpntoegang ranges=1.1.175.136-1.1.175.150
/ip dhcp-server
add address-pool=default-dhcp disabled=no interface=ether2-local-master name=default
/ppp profile
set 1 dns-server=8.8.8.8 remote-address=vpntoegang use-ipv6=no
/routing bgp instance
set default as=12345 router-id=1.1.168.50
/routing ospf instance
set [ find default=yes ] redistribute-connected=as-type-2 redistribute-static=as-type-2 router-id=1.1.168.50
/system logging action
set 3 src-address=::
/interface pptp-server server
set enabled=yes
/ip address
add address=1.1.168.50/30 interface=ether1
add address=1.1.175.130/32 interface=ether5 network=1.1.175.130
/ip dhcp-server network
add address=192.168.88.0/24 comment="default configuration" dns-server=192.168.88.1 gateway=192.168.88.1
/ip dns
set allow-remote-requests=yes max-udp-packet-size=512
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input comment="default configuration" protocol=icmp
add chain=input comment="default configuration" connection-state=established in-interface=ether1
add chain=input comment="default configuration" connection-state=related in-interface=ether1
add chain=input in-interface=ether1 src-address=86.89.233.x
add action=drop chain=input comment="default configuration" disabled=yes in-interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuration" out-interface=ether1 to-addresses=0.0.0.0
/ip neighbor discovery
set ether1 disabled=yes
/ip route
add check-gateway=ping distance=1 gateway=1.1.168.49
/ppp secret
add local-address=1.1.175.157 name=vpnuser password=test profile=default-encryption remote-address=1.1.175.157 service=pptp
/queue interface
set ether1 queue=ethernet-default
set ether2-local-master queue=ethernet-default
set ether3-local-slave queue=ethernet-default
set ether4-local-slave queue=ethernet-default
set ether5 queue=ethernet-default
/routing bgp peer
add name=r2.ams5 nexthop-choice=force-self remote-address=1.1.175.2 remote-as=12345 ttl=default
/routing ospf interface
add cost=5 interface=ether1 network-type=point-to-point
/routing ospf network
add area=backbone network=1.1.168.48/30
/system logging
add topics=ospf,!raw
/tool mac-server
add disabled=no interface=ether2-local-master
add disabled=no interface=ether3-local-slave
add disabled=no interface=ether4-local-slave
add disabled=no interface=ether5
/tool mac-server mac-winbox
set [ find default=yes ] disabled=yes
add interface=ether2-local-master
add interface=ether3-local-slave
add interface=ether4-local-slave
add interface=ether5
[admin@MikroTik] >
vk7zms
August 1, 2012, 12:35pm
4
I have never tried using any kind of ppp service with the remote and local addresses set to the same ip address - try changing the remote address - I always make the remote address unique for each user in case they login at the same time.