Hello!
Well, i have a client that in site A has a RB2011 and on Site B has a Drays**t Vigor 2860 with xDSL port connected to a DSL line.
Here is a network map.
netmap.png
In SiteA the Mikrotik router its dialing to the Draytek using a DynDNS hostname and the tunnel its already up and running… the problem is that from net 192.168.10.0/24 or even the router (Mikrotik) i am not able to ping or see the other network.. not even the drayteks tunnel IP,
Im a little frustrated because the Draytek tries to be the center of the universe and uses non standard names for some stuff, so it becomes a little confusing.
I tried to establish a IPsec tunnet but we dont have an Static IP address on either sites and Mikrotik doesnt allow to use a host name. (i know i can do a script to do so, but i wanted to give it a try with the pptp)
This is the PPTP Config on the draytek side..
draytek2.png
As far as i understand it refers to:
My WAN iP: Draytek Tunnel IP
Remote Gateway IP: MT Tunnel IP
Remote Netowrk IP: MT Network
Remote Network Mask: MT Network Mask
Local IP: Draytek Network
Local Network Mask: Draytek Network Mask
All Firewall filters on the draytek are disabled, at least the ones on the Firewall section of the router.
No one? perhaps i should ask on a Draytek forum instead right? (ifs theres one) .
I have never had an issue with mikrotik… this Drays**t Vigor are making me sick!
My WAN ip: WAN address of the Draytek router
Remote Gateway IP: local address of Mikrotik on other side
Remote network IP: local network of Mikrotik on other side (notation like 192.168.1.0, dont use /24 like in Mikrotik)
Remote network mask: netmask on Mikrotik lan (notation like 255.x.x.x)
Local network IP: local network of Draytek (notation like 192.168.1.0, dont use /24 like in Mikrotik)
Local network mask: netmask on Draytek lan (notation like 255.x.x.x)
Hope this helps. I also know that Draytek only supports certain types of encryption so make sure all are available on the Mikrotik. Uncheck one by one to find the config with the least available options - for safety i guess.
By default the Draytek uses 0.0.0.0, if i leave this like this it uses the IP address whos on the LAN Interface.
In the Mikrotik Router, in the PPTP Client settings, if i go to Status.. i get Local and remote address. If the Draytek has 0.0.0.0 on the mikrotik Shows local 172.16.1.2 but in remote shows the 192.168.20.1 which is the IP that the LAN in site B uses as Default gateway..
I have to say that the PPTP tunnel is running, so my question is: even if the encryption did not match, the routers are able to establish the tunnel?
Using the config showed above, heres a screenshot of the mikrotk router PPtPClient
Dray.png
Thank you!
If you see any gramar fault.. sorry ! English is not my natal language.
