PPTP VPN static routes , multiple organizations.

RouterOS General
1

I have 3 MT locations. One is PPTP server that has two lan subnets 192.168.0.0/24 & 192.168.1.0/24.
Other two locations are PPTP clients with 192.168.2.0/24 subnet and 192.168.3.0/24 subnet.
O have created ppp profile for every pptp client with local address 172.16.16.1 and 172.16.16.2 as remote for one.,
and 172.16.16.3 local and 172.16.16.4 for remote.
I have added static routes on central location for remote intranet 192.168.2.0/24 via 172.16.16.1 IP and reverse it on MT pptp client and packets are passing trough. Also for subnet 192.168.3.0/24 via 172.172.16.16.3 fand it is working.
Now when I want to add static routes to pass packets between MT-s that are pptp client, between 192.168.2.0/24 and 192.168.3.0/24 subnet , I add static routes on client MT for 192.168.2.0/24 subnet via the same pptp-out1 interface that I use for 192.168.0.0/24 subnet but packets are not passing trough.
I cannot ping 192.168.2.1 from 192.168.3.1 and vice versa.

What did I miss?
central.jpg

2

what does traceroute show?

maybe make a drawing of your network…

3

From MT3 traceroute to MT2:
[admin@MikroTik] tool> traceroute 192.168.2.1
ADDRESS STATUS
1 172.16.16.3 39ms 54ms 37ms
2 0.0.0.0 timeout timeout timeout
3 0.0.0.0 timeout timeout timeout
4 0.0.0.0 timeout timeout timeout

From MT2 traceroute to MT3:
[admin@MikroTik] tool> traceroute 192.168.3.1
ADDRESS STATUS
1 172.16.16.1 28ms 23ms 21ms
2 0.0.0.0 timeout timeout timeout
3 0.0.0.0 timeout timeout timeout
4 0.0.0.0 timeout timeout timeout
PPTP-VPN.jpg

4

seems like problem in MT1 configuration. do you have policy routing on it? or maybe drop rules in firewall filter…

5

I have not set any policy routing on MT1.
I have set a drop rule in FW filter to drop packets between subnets 0.0/24 and 0.1/24 but even if I disable this rule
the packets between 192.168.3.0/24 and 192.168.2.0/24 will not pass.
Here is the rule:
0 chain=forward src-address=192.168.0.0/24 dst-address=192.168.1.0/24
action=drop

Thanks in advance.

6

what do you see in Tools → Torch?

7

did you ever solve this problem? how can both or multiple clients can ping ang communicate to each other?