VPN to Windows Server 2012 R2 RRAS

RouterOS Beginner Basics
1

Hello!

I had a problem and I cannot solve it myself.
I have setup a routing and remote access role on a Windows Server 2012 R2.
Router has 192.168.20.1 and Windows Server 2012 R2 server has 192.168.20.2 IP.
I tried to make VPN Two types: PPTP and Lt2P and opened the following rules in my firewall:

  1. Filter Rules (attachment 1)
  2. NAT (attachment 1)

In both cases, nothing works, although on some rules the packets received.
If I connect directly to the server (192.168.20.2), it works, so the problem is in setting up the mikrotik, what am I missing here?

Thank you in advance for your help.
1.jpg
2.jpg

2

You know that action=passthrough is basically a “do nothing” action, right? From manual:

passthrough - if packet is matched by the rule, increase counter and go to next rule (useful for statistics)

In other words, your firewall filter in forward chain is not allowing any VPN packets through, they all get dropped by rule at the end. Then you have some packets reaching the router itself in input chain, for one or more of udp 1701, 500, 4500, which suggests that there’s something wrong with dstnat rules for these ports (they should be redirecting these ports to internal server).

Btw, it’s better to post text export (/export hide-sensitive file=myconfig).

3