VPN

RouterOS General
1

Good day,

I am having trouble setting up a VPN connection. I initially had it running on the 41.220.XX.30/30 address. We needed to increase our Public IP range. Instead of having the 41.220.XX.30/30 range increased or changed, a new range was forwarded to that exisiting ‘Link IP’. The new address range is 209.88.XX.112/29, with 209.88.XX.113 being on the Edge Router and 209.88.XX.114 being on the desired VPN Client. When i connect to on the LAN of 209.88.XX.114 and browse to http://www.whatsmyip.org/ my IP comes up as 209.88.XX.114. So I am sure that is working well. I am also able to ping the VPN Concentrator (41.XX.XX.142) only when connected to the VPN router. From the guys at the Concentrator they can also see my public IP.

Now my concern is that somewhere on the Edge Router i may need to enable a route of some sorts. This is what is in the VPN Client under IP > Routes. DST-ADDRESS 41.XX.XX.142/32 DST-ADDRESS 209.XX.XX.113

I have tried adding some routes on the edge router but am not even sure if I am using the right IPs. It worked perfectly before on the LINK IP but not on the new Public. Basically it would be an IP change on either side and since my side now has an extra device, i believe the issue could be on one of my two routers.

Firstly, has anyone seen this type of setup? Essentially 2 public IPS and secondly does anyone have any ideas where i might be going wrong?

regards
MNub
VPN.png

2

If other forms of internet access are all working from the 209.88.XX.114 address then perhaps you do need some ports opened on the edge router. What kind of VPN are you running?

3

Hey there!

We are making the initial connection with GRE (int> gre tunnel) and then running OSPF on top.

4

Are you running IPsec over GRE. What are the actual problem symptoms?

Your edge router simply needs to route - like any other router between your client and the concentrator. The VPN specific settings would be on the client and concentrator.

5

Hi,

Thanks for the help. It is working now without changing settings on my end. I don’t have access to the concentrator. It is run by another company and must have been where the problem was coming from.

Thanks again