Hello everyone
my isp doesn’t support public IP so I got VPN service with public IP and all ports are open
I use it directly on windows and everything work fine can access the open ports and everything
when I add the VPN client to Mikrotik for example PPTP-client
it gets to connect and I can browse the internet if I make mangle and firewall then the traffic go throw VPN normally
but when I want to access the router from outside using my static VPN IP
I can’t get any access even can’t ping to the static IP
any suggestion to try out
my network diagram
WAN---->pppoe---->mikrotik---->vpn-client---->new public ip
When you try and ping the tunnels address from outside the network are you doing it from the server? Only the Mikrotik and the VPN server should be able to ping each other on the VPN addresses unless you have set up proxy-arp/routing ect then your internal networks connected to the VPN server or client will be able to connect.
If you are looking to set up a configuration where your device can be reached from anywhere I would recommend looking at the IP>Cloud functionality, this will talk with mikrotiks servers and it will create a publicly rotatable domain name for the router. Please note that this by default will use your public IP address will be used if you would like a lan IP to be used instead please set /ip cloud advanced use-local-address=yes. So after you have enabled that you should be able to set up the VPN server on your Mikrotik then set up clients of that VPN to connect to that DNS name
Please configure your firewall accordingly to allow the VPN and the IP cloud packets to and from the mikrotik servers listed on the wiki and make sure you have adiqute rules that block andy unwanted traffic into your router or network https://wiki.mikrotik.com/wiki/Manual:IP/Cloud#Advanced
Just a guess, since you didn’t post any config, maybe your default route is still to your main ISP, you don’t do any marking for incoming connections and replies from your new public IP address are not sent back to VPN, but to your main ISP. And it of course can’t work.
