Routing through PPTP

  1. Created PPPoE connection to ISP xDSL, Desktop client works fine, can access internet OK.

  2. Created PPtP VPN connection. PPTP connection is established OK. I can ping remote VPN gateway computer from my RouterBOARD console. That works fine.

  3. The problem is that desktop computers on NAT-ed local network can’t ping remote VPN computer via established VPN connection. What am i missing? Static route? Firewall entry? Please help!

  MikroTik RouterOS 4.11 (c) 1999-2010       http://www.mikrotik.com/
[admin@MikroTik] > ip route print
Flags: X - disabled, A - active, D - dynamic, 
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme, 
B - blackhole, U - unreachable, P - prohibit 
 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          172.16.53.1        1       
 1  DS  0.0.0.0/0                          192.168.136.142    1       
 2 ADC  172.16.53.1/32     172.16.53.2     DSL                0       
 3 ADC  192.168.88.0/24    192.168.88.1    ether2-local-ma... 0       
 4   S  192.168.136.0/24   192.168.136.139 PPTP-VPN           1       
 5 ADC  192.168.136.142/32 192.168.136.133 PPTP-VPN           0       
[admin@MikroTik] >



[admin@MikroTik] > ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Added by webbox
     chain=srcnat action=masquerade out-interface=DSL 
[admin@MikroTik] >



  
[admin@MikroTik] > ip firewall filter print 
Flags: X - disabled, I - invalid, D - dynamic 
 0   ;;; Added by webbox
     chain=input action=accept protocol=icmp 

 1   ;;; Added by webbox
     chain=input action=accept connection-state=established in-interface=DSL 

 2   ;;; Added by webbox
     chain=input action=accept connection-state=related in-interface=DSL 

 3   ;;; Added by webbox
     chain=input action=drop in-interface=DSL 
[admin@MikroTik] >

Solved by adding masquerading to PPtP connection.