I noticed a few other things that you have different than I did…
-
You have quite a few DHCP pools defined as different names but the same addresses… I can’t see the point of that.
-
I had the local-address defined on the PPTP Server as my LAN IP through a profile… You seem to have it on the secrets.
Mine:
/ppp profile
add change-tcp-mss=yes local-address=10.129.0.1 name=PPTP-Server remote-address=LAN-DHCP use-encryption=yes
- I had the remote address defined on the PPTP Server as the appropriate DHCP pool… You seem to have a pool, but manually set the IP for each secret.
Mine:
/ppp secret
add name=username password=password profile=PPTP-Server
-
When I did need to set an IP manually for a user, I made sure to set that IP OUTSIDE the dhcp range. You don’t. Not sure if that has any bearing though. I did set that static assignment though the secret.
-
You say you have a bridge but I’m not seeing your ethernet ports setup as such… My config looked like:
/interface bridge
add arp=proxy-arp l2mtu=1598 name=bridge1
/interface bridge port
add bridge=bridge1 interface=ether3
add bridge=bridge1 interface=ether4
add bridge=bridge1 interface=ether5
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=wlan1
Under /interface ethernet it is empty. Set up proxy-arp on your interfaces if you don’t have them in a bridge that has member ports.
Edit: Ok I think I found your bridge config in the middle there:
/interface bridge port
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=ether2 path-cost=10 point-to-point=auto priority=0x80
add bridge=bridge1 disabled=no edge=auto external-fdb=auto horizon=none interface=ether3 path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-pppoe=no use-ip-firewall-for-vlan=no
And addresses:
/ip address
add address=228.105.107.182/30 disabled=no interface=ether1 network=228.105.107.180
add address=192.168.10.1/24 disabled=no interface=ether2 network=192.168.10.0
a. I’d change the address 192.168.10.1’d interface to be the bridge, not ether2.
Mine:
/ip address
add address=10.129.0.1/24 interface=bridge1 network=10.129.0.0
- In general I see a lot of stuff in your config in the area you are working on that I don’t see in mine… Anything extra is just extra, you don’t have to define a value for every option just the ones you use.
I know this may not be your fault… it might be the version of ROS that you’re using (I think they changed the behavior of export sometime recently). But I’d upgrade to the latest version and export compact again. See the examples below:
Secrets:
Yours:
/ppp secret
add caller-id="" disabled=no limit-bytes-in=0 limit-bytes-out=0 \
local-address=192.168.10.1 name=kas password=1111111111111111111111111 profile=\
default-encryption remote-address=192.168.10.100 routes="" service=pptp
Mine:
/ppp secret
add name=username password=password profile=PPTP-Server
Server Profile:
Yours:
/ppp profile
set default change-tcp-mss=yes name=default only-one=default use-compression=\
default use-encryption=default use-mpls=default use-vj-compression=\
default
set default-encryption change-tcp-mss=yes dns-server=192.168.10.155 name=\
default-encryption only-one=default use-compression=default \
use-encryption=yes use-mpls=default use-vj-compression=default \
wins-server=192.168.10.155
Mine:
/ppp profile
add change-tcp-mss=yes local-address=10.129.0.1 name=PPTP-Server remote-address=LAN-DHCP use-encryption=yes
(I just give the PPTP connection an ip out of the LAN pool… unless you’re going to be doing something special with them by IP, why have a separate range?)