PPTP VPN - can ping a device, but can't reach web GUI

I’ve definitely forgotten something simple here. I have a working PPTP server set up, but I can’t reach the web GUI of a DVR on that network, but I can ping it and I CAN reach it remotely through port forwarding from anywhere. At first I couldn’t ping anything except the router, but the router could ping everything on the network… figured out that I had to enable proxy-arp on ether2.

What could be keeping me from reaching the DVR’s web interface? I get a generic “could not connect” error in Chrome. I’ve tried two different locations with identical hardware and am getting the same thing in both.

RB750GL (LAN address 192.168.88.1)
PPTP server enabled
one Secret set up to use pptp service and default-encryption profile
default-encryption profile uses local address 192.168.88.20 (I had it at .88.1, but was testing things) and remote address from a “VPN” pool of 192.168.88.21-192.168.88.29
ether2 set to proxy-arp

When connected a dynamic Route gets created for 192.168.88.21. All other routes end in “/24” and I’m not sure why this one doesn’t. I have [what I think is] an identical setup on another RB750GL that is running 5.9 and it gets a dynamically created route that ends in “/32”. This one is running 5.16 and I’m not sure if that is just a difference between versions or if it’s a symptom of me having something set wrong.

Any ideas?

Jim later remembered proxy-arp on the interface.

Yeah but I had already found it before I posted this… still can’t get to the web GUI on the DVR for some reason.

What is the DVR’s IP, netmask and gateway set to?

DHCP from the mikrotik with static lease

Sent from my PC36100 using Tapatalk 2

Turns out that DVR doesn’t have a web GUI on port 80… port 7000 is used for the mobile app, but it didn’t even occur to me that I should have been trying 192.168.88.200:7000 locally… d’oh!!!