Site to Site VPN Ping help

RouterOS Beginner Basics
1

Hello everyone

I have set up a site to site VPN between two offices with RB450G at each site.

I can ping all the computers of site 1 from site 2.
The problem is when I want to ping computers in site 2 from site 1. I can only ping the router.

So, I assume there must be a problem with the firewall on site 2.

This is my configuration for site 2:

0   chain=srcnat action=accept src-address=192.168.44.0/24 
     dst-address=192.168.0.0/16 

 1   chain=srcnat action=masquerade out-interface=pppoe-out1 

 2   ;;; default configuration
     chain=srcnat action=masquerade to-addresses=0.0.0.0 
     src-address=192.168.44.0/24 out-interface=ether1-gateway




0   chain=input action=accept protocol=tcp dst-port=8291 

 1   chain=output action=accept protocol=tcp dst-port=1521 

 2   ;;; default configuration
     chain=input action=accept protocol=icmp 

 3   ;;; default configuration
     chain=input action=accept connection-state=established 

 4   ;;; default configuration
     chain=input action=accept connection-state=related 

 5   ;;; default configuration
     chain=input action=drop in-interface=ether1-gateway

Can anyone help?

2

I assume that router 1 is the server and router 2 is the client?

When Site 2 connects to site one there is a Route Generated. That is how site 2 reaches out to site 1.

However site one only knows about the device that called it. So you need to add a route back to the client network.

I.E.

Lets say that your network is 192.168.1.0/24 at site one
Lets say that your network is 192.168.2.0/24 as site two.

Now lastly lets also make the PPtP interface have a DIFFERENT SUBNET.
So in the properties on site one VPN.
Local IP would be 10.0.1.10
Remote IP would be 10.0.1.11

Now when they second site DIALS into the first site. A route is produced.
Add a router that reads 192.168.2.0/24 interface 10.0.1.11

Now router 1 is aware of how to get to the second routers clients.