Community discussions

MikroTik App
 
michael79
just joined
Topic Author
Posts: 8
Joined: Sun Feb 26, 2012 8:28 pm
Location: Germany / Stuttgart

Freezing / disconnection of Winbox over PPTP VPN

Sat Apr 12, 2014 2:15 am

If I am connected me to the PPTP VPN Server in my MikroTik externally and then start Windox with a private address over the PPTP VPN I have repeatedly dropped connections.
This clever with me for an update from V6.3 to V6.10 or V6.11 also. On 6.3 i was OK.
But I come across a PPTP server on the local network from another Mikrotik then I did not. And all works fine.

(PPTP VPN to Home network -> Mikrotik1 mit PPTP Server and tray to Connect with Winbox over VPN ) work not
(PPTP VPN to Home network -> Mikrotik1 mit PPTP Server-> Mikrotik 2 Winbox over VPN) work
(PPTP VPN to Home network -> Mikrotik2 mit PPTP Server and tray to Connect with Winbox over VPN ) work not
(PPTP VPN to Home network -> Mikrotik2 mit PPTP Server-> Mikrotik 1 Winbox over VPN) work

I tried this now with 4 mikrotik routers and always had the same result with different ISP. Is this due to a firmware bug or needs to change something in 6.3 config to access with Winbox via PPTP VPN on v6.10 or 6.11 to mikrotik directly to the.

Connections from a PC in LAN work perfectly

The connection termination are really only when vpn and WINBOX the same Mikrotik and Winbox connects via VPN. The web interface of the Mikrotik is also affected by this bug and runs un-stable!

Regards

Michael
 
Clauu
Member Candidate
Member Candidate
Posts: 217
Joined: Fri Mar 21, 2014 8:27 pm
Location: RO

Re: Freezing / disconnection of Winbox over PPTP VPN

Sat Apr 12, 2014 10:04 am

I'm facing the same problem http://forum.mikrotik.com/viewtopic.php?f=13&t=83882 with repeatedly dropped connections for winbox on ros 6.11
hope for a solution soon..
 
User avatar
docmarius
Forum Guru
Forum Guru
Posts: 1222
Joined: Sat Nov 06, 2010 12:04 pm
Location: Timisoara, Romania
Contact:

Re: Freezing / disconnection of Winbox over PPTP VPN

Sat Apr 12, 2014 8:23 pm

Maybe this could be a hint:

I have a pptp connection from a linux server to a mikrotik router running 6.11. On later firmwares (I can not remember starting with which one), connectoins dropped if I tried to reach computers behind that pptp endpoint.
Setting the mtr value of that connection (on the linux client side) to 1400 solved the issue.
 
Clauu
Member Candidate
Member Candidate
Posts: 217
Joined: Fri Mar 21, 2014 8:27 pm
Location: RO

Re: Freezing / disconnection of Winbox over PPTP VPN

Sat Apr 12, 2014 8:36 pm

Thanks for the tip, i'll try it
 
michael79
just joined
Topic Author
Posts: 8
Joined: Sun Feb 26, 2012 8:28 pm
Location: Germany / Stuttgart

Re: Freezing / disconnection of Winbox over PPTP VPN

Sat Apr 12, 2014 9:20 pm

Ok I tried it now time 1400 instead of 1450 but without success.
I myself have indeed no problems to connect to the LAN that is connected behind the Mikrotik, but really only directly on the Mikrotik via PPTP VPN this works for a few seconds or maximum 2 minutes and then stops. A new connection is in the connection again possible, however, with interrupts after a short time Otherwise, the VPN works perfectly only the Winbox interrupts.
 
Jeroen1000
Member Candidate
Member Candidate
Posts: 202
Joined: Fri Feb 18, 2011 2:05 pm

Re: Freezing / disconnection of Winbox over PPTP VPN

Wed May 14, 2014 2:22 pm

I've got the same problem. Disconnect within minutes. Tried all kinds of things like turning of the firewall rules that could potentially be a cause.

It seems that connecting to the routers internal LAN IP over a PPTP VPN is causing issues....
 
MetUys
newbie
Posts: 32
Joined: Mon Mar 17, 2014 1:19 pm

Re: Freezing / disconnection of Winbox over PPTP VPN

Thu May 22, 2014 9:36 am

Same issue Here.

Mikrotik-Remote <- PPTP (MTU1450) -> Mikrotik-Main:
- problematic winbox access from system behind Mikrotik-Remote when connecting to internal IP or VPN IP of Mikrotik-Main.
- problematic winbox access from system behind Mikrotik-Main when connecting to internal IP or VPN IP of Mikrotik-Remote.
- no problem accessing a mikrotik via winbox in the LAN behind Mikrotik-Main when connecting to internal IP over same VPN from system behind Mikrotik-Remote.

I did try change the MTU on the Mikrotik -Remote, but this didn't help.

winbox filter rules are allowed for both forward and input on all Mikrotiks, and both sides are behind a srcnat.

I originally thought it might be the Mikrotik-Main device, and did a reset with no config and manually set it all up again (i.e. did not restore from backup ), but this didn't help...

any advise/solution?
 
User avatar
deem
just joined
Posts: 21
Joined: Mon Sep 16, 2013 6:14 pm

Re: Freezing / disconnection of Winbox over PPTP VPN

Wed Jul 02, 2014 11:08 pm

Joining this issue.

I tried everything: changing MSS, changing MTU/MRU, checking with sniffers etc...

Winbox keeps disconnecting when running over VPN.

In sniffer i found a TCP packet with wrong CRC, after that one side becoming in strange state.

ROS 6.15 very easy to reproduce.
 
User avatar
falestiny
Frequent Visitor
Frequent Visitor
Posts: 51
Joined: Fri Sep 10, 2010 3:11 pm
Location: everywhere
Contact:

Re: Freezing / disconnection of Winbox over PPTP VPN

Thu Jul 03, 2014 10:04 pm

try PPTP without encryption then everything will works fine.


Give Karma if answer was useful.
 
User avatar
deem
just joined
Posts: 21
Joined: Mon Sep 16, 2013 6:14 pm

Re: Freezing / disconnection of Winbox over PPTP VPN

Sun Jul 06, 2014 9:15 am

try PPTP without encryption then everything will works fine.
How can we live without encryption nowadays?

I found a better solution — to strip IPv4 options:
ip firewall mangle add chain=postrouting protocol=tcp src-port=8291 action=strip-ipv4-options
Apply this code on every router with the issue. It works very well — no disconnects / freezes after that.
 
User avatar
czolo
Member
Member
Posts: 423
Joined: Fri Mar 04, 2005 9:49 am
Location: Poland (Warsaw)
Contact:

Re: Freezing / disconnection of Winbox over PPTP VPN

Thu Jul 17, 2014 3:10 pm

Version 6.16 solves this problem.

Who is online

Users browsing this forum: bcmdevtl, simtj and 98 guests