I have just bought a Mikrotik router with RouterOS 5.20.
I have setup SSTP-VPN.
Router IP: 10.60.60.1/24
VPN user IP: 10.60.60.156
Server #1: 10.60.60.10
Server #2: 10.60.60.12
I am successfully connected with the VPN-connection.
From VPN user, I am allowed to PING the router (10.60.60.1) and Server #1 (10.60.60.10), but not Server #2 (10.60.60.12)
I added two firewall rules:
- ICMP accept forward chain from my VPN-interface
- ICMP accept forward chain from my bridge-local
When I ping from VPN client => Server #2 packets are incrementing only on the VPN-interface rule
When I ping from Server #2 => VPN client I get “Reply from 10.60.60.12: Destination host unreachable.”
When I add a route “route add 10.60.60.156 mask 255.255.255.255 10.60.60.1” to Server #2 it works.
I dont understand, because 10.60.60.1 is set as default gateway.
Do I have to setup another IP-range on the VPN-clients?
When I run arp -a on Server #2 after pinging the VPN-client, it is not listed.
Any help would be appreciated!
