Community discussions

 
User avatar
ingdaka
Member Candidate
Member Candidate
Topic Author
Posts: 146
Joined: Thu Aug 30, 2012 3:06 pm
Location: Albania
Contact:

Remote Access & Port Forward Over L2TP

Fri Sep 06, 2019 12:42 am

I have a scenario like in picture:

Image

R1 has public IP and is configured as L2TP Server! R2 have just internet over nat and is configured as L2TP client! Both routers have full routing table to know each-other routes. R2 has a CCTV system connected. I can access this system from R1 LAN. Also there are some other routers connected to R1 with L2TP and have routes to go to R2, from their LAN I can access CCTV system to!

But I want to access this system from WAN side, so created a portforward role to R1 from WAN IP to CCTV system IP I can see traffic pass router but cannot access CCTV System

Any mind if it should work...
Ilir Daka
Electronic & Network Engineer
E-mail: ilirdaka@live.com
Mob: +355692982151
WhatsApp: +355692982151
Mikrotik Official Consultant
CCNA | Fortinet NSE3 | MTCRE | MTCSE
 
Sob
Forum Guru
Forum Guru
Posts: 4527
Joined: Mon Apr 20, 2009 9:11 pm

Re: Remote Access & Port Forward Over L2TP  [SOLVED]

Fri Sep 06, 2019 1:24 am

If you configure everything properly, it should work. The main part is making sure that R2 routes response packets from CCTV back to R1 via tunnel, and doesn't try to send them directly to client's address. So mark incoming connections from tunnel and then mark routing for replies to go back to tunnel.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
User avatar
CZFan
Forum Guru
Forum Guru
Posts: 1359
Joined: Sun Oct 09, 2016 8:25 pm
Location: South Africa, Randburg
Contact:

Re: Remote Access & Port Forward Over L2TP

Fri Sep 06, 2019 1:26 am

You might have to do some src NATing on R1 side for WAN client in order for other side to return packets via R1
MTCNA, MTCTCE, MTCRE & MTCINE
 
Sob
Forum Guru
Forum Guru
Posts: 4527
Joined: Mon Apr 20, 2009 9:11 pm

Re: Remote Access & Port Forward Over L2TP

Fri Sep 06, 2019 3:59 am

Or that. But unless R2 is something limited (so not with RouterOS or any other advanced enough system), it can be done without it.
People who quote full posts should be spanked with ethernet cable. Some exceptions for multi-topic threads may apply.
 
User avatar
ingdaka
Member Candidate
Member Candidate
Topic Author
Posts: 146
Joined: Thu Aug 30, 2012 3:06 pm
Location: Albania
Contact:

Re: Remote Access & Port Forward Over L2TP

Tue Sep 10, 2019 10:17 pm

Just got it! Have to create a mangle rule to routing mark traffic of my camera and set a default route for this marked traffic and set as exit interface my vpn interface!
Ilir Daka
Electronic & Network Engineer
E-mail: ilirdaka@live.com
Mob: +355692982151
WhatsApp: +355692982151
Mikrotik Official Consultant
CCNA | Fortinet NSE3 | MTCRE | MTCSE

Who is online

Users browsing this forum: No registered users and 58 guests