PPTP VPN connection over PPPoE

RouterOS General
1

can’t configure PPTP over PPPoe. PPTP client create, disable default route, SRCNAT rule add, route to internal network add, ping to internal network work, HTTP and SSH not work
Route table:

[admin@MikroTik] > /ip route print 
Flags: X - disabled, A - active, D - dynamic, C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          byfly                    10
 1 A S  51.15.01.2/32                   byfly                     9
 2 ADC  100.84.0.1/32      100.84.63.185   byfly                     0
 3 A S  192.168.1.0/24                     ether1-master             1
 4 ADC  192.168.77.1/32    192.168.77.102  s2                        0
 5 ADC  192.168.88.0/24    192.168.88.1    bridge                    0

NAT table

[admin@MikroTik] > /ip firewall nat print 
Flags: X - disabled, I - invalid, D - dynamic 
 0    ;;; defconf: masquerade
      chain=srcnat action=masquerade out-interface-list=WAN ipsec-policy=out,none 

 1    chain=srcnat action=masquerade out-interface=s2 log=yes log-prefix="" 

 2    chain=srcnat action=masquerade out-interface=byfly log=no log-prefix="

Filter Rules

[admin@MikroTik] > /ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0  D ;;; special dummy rule to show fasttrack counters
      chain=forward action=passthrough 

 1    ;;; defconf: accept in ipsec policy
      chain=forward action=accept ipsec-policy=in,ipsec 

 2    ;;; defconf: accept out ipsec policy
      chain=forward action=accept ipsec-policy=out,ipsec 

 3 X  ;;; defconf: fasttrack
      chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix="" 

 4    ;;; defconf: accept established,related, untracked
      chain=forward action=accept connection-state=established,related,untracked 

 5    ;;; defconf: drop invalid
      chain=forward action=drop connection-state=invalid log=yes log-prefix="" 

 6    ;;; defconf:  drop all from WAN not DSTNATed
      chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN 

 7    chain=input action=accept protocol=icmp 

 8    chain=input action=accept connection-state=established log=no log-prefix="" 

 9    chain=input action=accept connection-state=related 

10    chain=input action=drop in-interface=byfly log=no log-prefix=""
2

Hello everyone,

Can I ask if is possible to create PPtP server on RB Mikrotik that is connected to ISP by PPPoE protocol?
Moreover I cannot connect remotely via winbox to my RB, can it affect PPPoE connection also ?
I have public static IP address and on firewall were allowed ports for winbox and pptp.


Thanks

3

There is absolutely no problem in using the router as a PPtP client whilst it has a PPPoE internet connection. The issue you are facing sounds like you are allowing the PPtP tunnel to apply it’s own default route weighted “1”. Do not allow it to create it’s own route and then build your route based on how you want to use it (static routed subnet, policy based with mangle etc).