Hi all,
I am new in this field, so maybe you can help me. I have the following configuration:
Site A - mikrotik router, local network: 192.168.2.0/24 (static public IP Address: 86.xxx.xxx.xxx)
Site B - mikrotik router, local network: 192.168.3.0/24 (dynamic public IP Address)
I created a VPN server on Site A and VPN Client on Site B. From computers connected to Site A lan I can ping computers connected to Site B lan. But if I connect to Site A from another computer, using VPN, I can not ping Site B computers, only Site A computers.
Please see below both routers configuration:
Site A configuration:
ppp profile print detail
name=“vpn_profile” local-address=192.168.2.1 remote-address=vpn
bridge=bridge-local use-mpls=default use-compression=default
use-vj-compression=default use-encryption=default only-one=default
change-tcp-mss=default
ppp secret print detail
name=“vpn_tom” service=pptp caller-id=“” password=“XXXXX”
profile=vpn_profile routes=“192.168.3.0/24” limit-bytes-in=0
limit-bytes-out=0
ip firewall nat print detail
0 chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=bridge-local
1 chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=ether1-gateway-rds
4 chain=srcnat action=masquerade dst-address=192.168.3.0/24
ip route print detail
4 ADC dst-address=192.168.2.199/32 pref-src=192.168.2.1 gateway=<pptp-vpn_tom>
gateway-status=<pptp-vpn_tom> reachable distance=0 scope=10
5 ADS dst-address=192.168.3.0/24 gateway=192.168.2.199
gateway-status=192.168.2.199 reachable via <pptp-vpn_tom> distance=1
scope=30 target-scope=10
Site B configuration:
ip firewall nat print detail
1 chain=srcnat action=masquerade to-addresses=0.0.0.0
out-interface=pppoe-out1
2 chain=srcnat action=masquerade out-interface=GIFP_Top
ip route print detail
0 ADS dst-address=0.0.0.0/0 gateway=89.xxx.xxx.xxx
gateway-status=89.xxx.xxx.xxx reachable via pppoe-out1 distance=1
scope=30 target-scope=10
1 ADC dst-address=89.xxx.xxx.xxx/32 pref-src=89.xxx.xxx.xxx gateway=pppoe-out1
gateway-status=pppoe-out1 reachable distance=0 scope=10
2 ADC dst-address=192.168.2.1/32 pref-src=192.168.2.199 gateway=GIFP_Top
gateway-status=GIFP_Top reachable distance=0 scope=10
3 ADC dst-address=192.168.3.0/24 pref-src=192.168.3.1 gateway=bridge-local
gateway-status=bridge-local reachable distance=0 scope=10
Please let me know if you need more details.
Many thanks,
Robert