PPTP is much smarter than I am

RouterOS General
1

I’ve just started playing with PPTP and I am so confused.

! I create the PPTP server
/ interface pptp-server
add name=“PPTP” user=“matt” disabled=no
/ interface pptp-server server
set enabled=yes mtu=1460 mru=1460 authentication=mschap2,mschap1 \ keepalive-timeout=30 default-profile=default

! I create the PPTP client
/ interface pptp-client
add name=“pptp-out1” mtu=1460 mru=1460 connect-to=x.y.z.a user=“matt”
password=“matt” profile=default add-default-route=no
allow=mschap2,mschap1,chap,pap disabled=no

And when I monitor I see them connected - looks go so far

status: authenticated
uptime: 2s
idle-time: 2s
user: matt
caller-id: x.y.z.b

The problem:

! Server side IP address
/ip address
add address=192.168.7.1/24 network=192.168.7.0 broadcast=192.168.7.255
interface=PPTP comment=“” disabled=no

! client side address
/ip address
add address=192.168.7.2/24 network=192.168.7.0 broadcast=192.168.7.255
interface=pptp-out1 comment=“” disabled=no

Despite the PPTP being up neither end can ping the other. This is a very raw install - outside IP addresses, inside addresses, and NAT - there isn’t any sort of access list blocking stuff. The PPTP sessions show up, too, just no IP connectivity.

This is on 2.8.28

2

What about routes on your client?

3

Routes on the client? I can’t ping from one MT box to the other - I thought getting that part to work would be the first step. Are you saying PPTP sessions can’t ping each other’s end but they will pass traffic? That seems a bit odd to me …

4

All I want to say is that without appropriate routes you will not ping anything. Have you read Mikrotik manual and especially part “PPTP Application Examples”?

5

The tunnel is up. There is an IP address assigned to each end. Each MikroTik device should be able to ping the other end, correct?

6

OK, when the tunnel is up the machines can not ping each other via their public IP addresses. I’ve gone as far as adding static host routes on each end.

I guess I shouldn’t say that they can’t ping, its just very, very unlikely - I get maybe one out of a hundred. There is nothing wrong with the IP transport between the sites - lots of other stuff works fine. I did upgrade from 2.8.28 to 2.9.10 and that hasn’t helped.

7

Can you please post your Mikrotik configuration? (routes, interfaces and filter rules)?