VRRP and DHCP and VPN

Hi!
I’m using vrrp on two rb2011L routers.
General Router scheme:

(I-net) ~~~ WAN
LAN(-±vrrp1) ~~~~~ Clients network (Windows/Linux PCs)

LAN interface arp=enabled
vrrp arp=enabled

DHCP server serves addresses (&etc) for LAN interface (?not sure if this is right in my situation, maybe it’s better to serve to vrrp1 ??)


I must setup arp=proxy-arp for LAN interface for my external VPN (pptp) connections to work.
After I do so, I run to an issue: windows clients connected to LAN does not receive IP address from DHCP server. Even more: after entering manually static IPs for windows client computers, windows start to complain, that entered address is in use by Routers physical MAC.
What can be done in this situation to VPN and DHCP work correctly?

sadly, the reply with “I have that address” to any arp request is what you are telling the router to do with arp=proxy-arp. There is no manner to limit router o respond to specific ip address requests, anyway for windows client it should be problematic only with their secondary ip address (I don’t know why… just experimented that problem).

normally DHCP binds on lan interface, not on the vrrp one, and server addresses of the subnet giving the vrrp address as gateway

which version of routeros are you using?
post some configuration.

Hi, we have attempted to implement VRRP on an Windows DHCP network and are experiencing the same issue that you describe… :frowning: Did you manage to resolve this issue? As we would be interested to find out how.

Thanks in advance.