Introduction: I insert a picture of the network connections with the names of the devices named below
I have a routerboard (in picture called rb2) with 4G connectivity with ISP IP under NAT. To reach its interface from the outside I thought to create a PPTP tunnel between it and my main routerboard (in picture called rb1).
I created a PPTP server on rb1 with these parameters (cleaned):
The IP 192.168.3.75 is the IP of rb1 which corresponds to the gateway of the rb1 LAN. the IP 192.168.3.43 is the IP I want to assign to the PPTP interface on the rb2.
Code: Select all
/ppp profile add bridge=bridge1 local-address=192.168.3.75 name=hap01 /interface pptp-server server set enabled=yes /ip address add address=192.168.3.75/24 interface=bridge1 network=192.168.3.0 /ppp secret add local-address=192.168.3.75 name=hap01 password="***************" \ profile=hap01 remote-address=192.168.3.43 routes=\ "192.168.1.0/24 192.168.3.75" service=pptp set name="rb1"
On rb2 I created a PPTP client with these parameters (cleaned):
I put the PPTP interface to masquerade and connecting any device on the rb2 bridge ports everything works and I navigate using the ISP public IP of rb1.
Code: Select all
/interface bridge add name="bridge LAN" add name="bridge VPN" /interface pptp-client add add-default-route=yes connect-to=[rb1 ISP Public IP] disabled=no name=VPN-Client \ password="***************" user=hap01 /ip pool add name=dhcp_pool1 ranges=192.168.2.100-192.168.2.200 /ip dhcp-server add address-pool=dhcp_pool1 disabled=no interface="bridge VPN" name=dhcp2 add bridge="bridge VPN" interface=ether4 multicast-router=disabled add bridge="bridge VPN" interface=ether5 multicast-router=disabled set name="rb2"
With a pc connected to rb2 LAN (in picture called PC2) trying to ping a device connected to the rb1 LAN (in picture called NAS) it answers and I can access it. From rb1 terminal trying to ping 192.168.3.43 (PPTP interface rb2) it responds, while if I try to ping it from a device under the rb1 LAN (in picture called PC1) it does not respond. I don't even see the IP 192.168.3.43 in the rb1 ARP list.
What am I wrong? I have minimized the exposure of my configurations to avoid confusion. If you need further details on configurations, please ask
Thanks so much everyone