Just as intro, I am fairly new to MikroTik, but have quite a few of them in the field and have done basic configs and VPNs. This one in particular I am having all sorts of problems with the VPN and hope someone can help me in the right direction. I am able to connect to the VPN and ping the LAN IP 10.5.204.1 but I have a device plugged into the MikroTik 10.4.22.5 that I cannot ping. My IP address on ether2 is 10.5.204.1/8 network 10.0.0.0 and broadcast 10.255.255.255.
If I log into winbox I can ping 10.4.22.5 just fine but not from my VPN connection.
I had success last week with a mikrotik lan on 192.168.88.1 but I had 10.10.10.x devices plugged into it. On that one I was able to assign another 10.10.10.x address to ether2 then give myself yet another 10.10.10.x address on my PPP secret and I could access them just fine.
a Network diagram might help us understand topology.
I know from my experience you need to have a route on your office (onsite where you are) forcing traffic to go over the vpn tunnel.
we usually use static routes to accomplish this.
post export of your ppp secrets for your remote mikrotik.
usually you’ll create a static route on your local mikrotik like this
10.0.0.0/8(destination network) gateway= this ip will be the ip found in ppp > secrets on the remote mikrotik the local address in secrets.
by doing this your pointing any traffic destined for the 10.0.0.0 address to go over the vpn tunnel.
I’d advise you to make some adjustments if you can you probably don’t want the remote mikrotik to have a /8 on the inside interface, especially if the local network your on has any 10.0.0.0 addresses you’ll cause traffic that normally goes to a 10.0.0.0 on your local lan to go over the vpn tunnel.
If you have any further questions or I misunderstood your issue let me know.
Thought of another possibility..
If the device on the remote lan doesn’t have the right default route or the subnet mask isn’t the same as the inside interface on the remote router, you may be able to communicate from the remote mikrotik itself as a peer but as far as the vpn goes routing from your local lan through the vpn tunnel to the inside interface then to the device itself may not work.