site to site pptp vpn

RouterOS General
1

Hello fewi

i have site to site VPN and both connected. the problem is from apps server side cant ping to client pc ip 192.168.5.10. but from client pc to apps server 192.168.1.100 ping work fine even the tunnel ip can ping too, i add route both to local IP to reach both local, there is something mssing wrong here?

apps server 192.168.1.100 ip <<<< routerA ---- tunnel ----- routerB >>>> client pc 192.168.5.10 ip
the tunnel ip are 100.100.100.4 and 100.100.100.5

routerA (server side)

[myron@OneMGM] /ip route> print

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 A S 0.0.0.0/0 121.xx.xxx.xx 1
1 ADC 100.100.100.5/32 100.100.100.4 <pptp-paradiseb... 0
2 ADC 121.xx.xxx.xx/24 121.xx.xxx.xx ether1 0
3 ADC 192.168.1.0/24 192.168.1.1 ether2 0
4 ADC 192.168.2.0/24 192.168.2.1 ether3 0
5 ADS 192.168.5.0/25 100.100.100.5 1

routerB (client side)

[paradisegarden@ParadiseGarden Manila] > ip route print

DST-ADDRESS PREF-SRC GATEWAY DISTANCE

0 A S 0.0.0.0/0 119.xxx.xxx.xx 1
1 ADC 100.100.100.4/32 100.100.100.5 to boracay 0
2 ADC 119.xx.xxx.xx/29 119.xx.xxx.xx ether1-gateway 0
3 A S 192.168.1.0/24 100.100.100.4 1
4 ADC 192.168.5.0/24 192.168.5.1 ether2 0
5 ADC 192.168.6.0/24 192.168.6.1 ether3 0

Regards

Myron

2

Ping is bidirectional when you get replies, so there really are only two likely causes:

  • routing is wrong and it works one way because NAT is implemented differently in that direction, causing packet headers to contain IPs that routes match for (this can also affect what is going through the VPN and what is going through the WAN sometimes)
  • routing is right, and the client machine has a firewall that blocks ICMP requests but not replies to requests it made itself

If you need further help post the VPN configuration as well as your NAT rules, IP addresses and routes, ideally together with a network diagram.

3

yeah fewi your probably correct i have strong feeling this client machine blocking the icmp request they are using windows 7, even i tried L2TP and configure properly but same issue, im going to investigate this issue and i get back to you soon fewi.

thanks

4

fewi the problem solved now some of there client pc using win7 blocking the icmp request :laughing:

Cheers