VPN Issues

RouterOS Beginner Basics
1

Hello, recently I’ve needed to reach my home network and some servers that are on said network remotely. I’ve setup a PPP VPN on my MikroTik and i can log into the VPN over the internet but there is a problem. I can only reach\ping computers and server on the MikroTik’s subnet.

Attached to the MikroTik (192.168.88.0/24) i have another router that also functions as a DHCP server and hands out 192.168.1.0/24 address. As said previously i can only reach 192.168.88.0/24 address, and nothing outside that range. Including my other router which is 192.168.1.0/24. Any suggestion on how i can reach everything on my home WAN and not just things attached directly to the MikroTik 192.168.88.0/24 network?

I’m thinking maybe i need some sort of bridge. Thank you

2

First you need some sort of routes. Devices that should communicate must know how to reach each other. Client must either use VPN as default gateway or needs route to the other subnet (192.168.1.0/24) leading to VPN tunnel. Devices in the other subnet don’t need anything special. Neither does the other router, assuming that it uses main router as its default gateway. Next step are firewalls on both routers and target devices, they must allow connections from client.

3

Ok, how would i go about doing that within Winbox?

4

That would be a long lecture…

Start with the basics:

  • What routes does VPN client have? Does it use VPN as default gateway, i.e. everything is routed to tunnel?
  • Is the second router connected as I think, i.e. to main router, with 192.168.88.x/24 on one interface and 192.168.1.y/24 on another, with main router (192.168.88.1) as default gateway?
  • Does the second router use NAT or not? If not, main router would have route to 192.168.1.0/24 via 192.168.88.x (x = whatever the second router has).
  • Without VPN, can device in 192.168.88.0/24 subnet connect to devices in 192.168.1.0/24?

Also, sharing your current config could help, because now everyone can only guess what you have.