Remote Access to 3G with Internal IP Address

RouterOS General
1

Hi Guys

Pre-pay SIM Card with Vodafone NZ which I am given an internal IP Address.

Using Serria Mini-PCI Card.

The best I have been able to achieve is to install a PPTP Tunnel and are able to telnet into the 3G connection.

What tunnel would be best to present one of my external IP Address via my Core Router to this 3G connection?

Cheers

Matt

Now thinking to pppoe over it? Will try later when back in office.

2

I now have 3 x tunnels running on the 3G Router.

1./ pptp - Connects to my Core Router, but not able to run PPPoE over it

2./ pptp - Able to run PPPoE over this tunnel

3./ PPPoE - Able to ping from my MikroTik Router, but not from my network.


Here are the routes on the 3G Router

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 ADS 0.0.0.0/0 lte1 0
1 DS 0.0.0.0/0 192.168.50.1 1
2 ADC 10.35.228.0/24 10.35.228.80 lte1 0
3 ADC 192.168.1.0/24 192.168.1.1 bridge1 0
4 ADC 192.168.50.1/32 192.168.50.4 pptp-out1 0


My MikroTik Core Router:

Bridge: vpn-bridge
IP Address on vpn-bridge: 192.168.50.1

Routes refering to 192.168.50.0

211 ADC 192.168.50.0/24 192.168.50.1 bridge-vpn 0
212 ADC 192.168.50.4/32 192.168.50.1

I can ping 192.168.50.1 from anywere on my network, but not 192.168.50.4

I suspect I am missing a route somewere?

Any ideas?

3

I am afraid that I do not understand a) what you are trying to achieve, and b) what your problem is. Perhaps you could post a network diagram?

4

Hi

I want to remote log in to a Pre-Pay 3G connection.

The ISP is supplying an internal IP Address, not external.

I expect I would need to be on a more expencive Post Pay account for an External IP Address.

Matt

5

There is no such thing as an ‘external’ or ‘internal’ IP address. An IP address is an IP address. Whether or not it is publically routable is a different matter.

I am assuming that you mean the ISP is supplying an IP address which is not routable (probably in RFC1918 address space) and you need to be able to access the RouterBoard on a routable IP address.

Then you do need to create a VPN, you are correct. What kind of VPN depends on what traffic your ISP blocks or permits.

If your internal network uses addresses in non-routable space, then you need to NAT traffic egressing through the tunnel.

If your internal network uses routeable address space, then you need to ensure that the correct routes are created both at the local Routerboard and the remote LNS/concentrator.