Community discussions

MikroTik App
 
yeremia1234
just joined
Topic Author
Posts: 4
Joined: Fri Jul 28, 2017 2:51 am

Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 7:44 am

I have two router which connected with vpn. The router configuration like this
Router CORE
PUBLIC IP : 66.96.234.199/32
IP VPN : 172.1.23.1
Router Client
IP VPN : 172.1.23.33

I've port forward from router client to router core which that router have ip public. When i'm access Router Client with ip public + port that i've forward before, in /system active user show ip router core vpn. How can i get real address when access router client?. Sorry for my english

This is from my router client
Flags: R - radius, M - by-romon
# WHEN NAME ADDRESS
0 may/07/2022 04:13:22 admin F8:E4:3B:82:2D:57
1 may/07/2022 04:42:07 admin 172.1.23.1
2 may/07/2022 04:43:17 admin 172.1.23.1
 
User avatar
mkx
Forum Guru
Forum Guru
Posts: 11383
Joined: Thu Mar 03, 2016 10:23 pm

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 3:53 pm

How can i get real address when access router client?
You have to adjust SRC NAT rules. It's hard to tell in what way because you didn't post almost any details about configuration (both core router and client router configurations matter).
 
yeremia1234
just joined
Topic Author
Posts: 4
Joined: Fri Jul 28, 2017 2:51 am

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 3:57 pm

How can i get real address when access router client?
You have to adjust SRC NAT rules. It's hard to tell in what way because you didn't post almost any details about configuration (both core router and client router configurations matter).
What kind of configuration i must write it?
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 18961
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 5:35 pm

Read what mkx wrote.......need more detail, please post your config as a minimum
/export hide-sensitive file=anynameyouwish

a network diagram sometimes helps as well.
 
yeremia1234
just joined
Topic Author
Posts: 4
Joined: Fri Jul 28, 2017 2:51 am

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 6:36 pm

Read what mkx wrote.......need more detail, please post your config as a minimum
/export hide-sensitive file=anynameyouwish

a network diagram sometimes helps as well.
https://drive.google.com/file/d/1diPv4J ... p=drivesdk

This is my diagram network. Maybe can help you
 
tangent
Forum Guru
Forum Guru
Posts: 1333
Joined: Thu Jul 01, 2021 3:15 pm
Contact:

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 7:05 pm

IP VPN : 172.1.23.1

Is that supposed to be a private LAN address? If so, it betrays a common misunderstanding of RFC 1918, which is that all 172.* addresses are available. That isn't the case. 172.0.0.0/12 belongs to AT&T. As long as you use their IP block on your private network, any time a DNS lookup resolves to one of their IPs, it'll get eaten by your local network configuration.

If I'm right about this, you should renumber to something in the 172.16.x.y - 172.31.x.y space.

in /system active user show ip router core vpn.

Yes: you will indeed see an internal IP in that case. That's the wrong level to expect to see a public IP address.

How can i get real address when access router client?.

Use a public IP address lookup service such as this one.
 
yeremia1234
just joined
Topic Author
Posts: 4
Joined: Fri Jul 28, 2017 2:51 am

Re: Get Real Address when Login to Mikrotik Winbox

Sat May 07, 2022 7:12 pm

IP VPN : 172.1.23.1

Is that supposed to be a private LAN address? If so, it betrays a common misunderstanding of RFC 1918, which is that all 172.* addresses are available. That isn't the case. 172.0.0.0/12 belongs to AT&T. As long as you use their IP block on your private network, any time a DNS lookup resolves to one of their IPs, it'll get eaten by your local network configuration.

If I'm right about this, you should renumber to something in the 172.16.x.y - 172.31.x.y space.

in /system active user show ip router core vpn.

Yes: you will indeed see an internal IP in that case. That's the wrong level to expect to see a public IP address.

How can i get real address when access router client?.

Use a public IP address lookup service such as this one.
172.1.23.0/24 is local vpn ip from router core to router client. When router client connect to router core, router client get ip 172.1.23.33 from vpn tunnel. Mkv tell to use src nat its right. But i dont know how to config src nat in both of router

Who is online

Users browsing this forum: anav, JDF and 94 guests