Discussion:
[MikroTik] Internet access via PPTP-client. Please help!
Nick Dvoeglazov
2004-05-23 19:16:49 UTC
Permalink
Hello, list,

I hope anyone can help me with the problem which has been annoying me for
months now. I've read the manual, the entire mail-list archive and
intensively
searched the net, but to no avail...

My local ISP uses ethernet and a central PPTP-server as means of accessing
the Internet. The service is aimed mostly at end-users using Windows
machines

and there has been no problems connecting via the Windows PPTP client. The
established PPP connection assigns a real static IP address and both DNS
names. The internal LAN is 10.0.*.* network with 10.0.0.1 being the
PPTP-server.
Until now, I've been using D-Link DI-804HV 4-port router. I use it to
masquerade 3 machines in my internal network, which is 192.168.0.0/24.
Here is where the problem appears: the D-Link router hangs every 2-3 days
and the only thing I can do to reestablish communications is to power-cycle
the unit. There is a server in the DMZ-zone behind the router so this
behaviour is totally unacceptable. The support at D-Link was less than
helpful and just ignored my posts in the forum and e-mails.

I've assembled a small PC router with 3 ethernet interfaces and installed
RouterOS on it. (I've had no luck setting up the pptp-client in FreeBSD).
I configured the "ether1" interface to my ISP local network with the
following settings.

IP/Netmask: 10.1.52.22/24

Next, I created a static route to 10.0.0.1/32 (the providers' PPTP server)
using the gateway 10.1.52.1 (supplied by the ISP)

I've also configured the "ether2" interface for use over my internal LAN,
with IP/Netmask being 192.168.0.100/24

Next, I created a pptp-client interface named "vpn" and assigned all the
necessary properties to it (i.e the address of the PPTP server = 10.0.0.1,
login & password, etc.)
There is definitely something I am missing here. I assume I am doing
something wrong in the "ip route" section. I've tried turning the
"add-default-route" property on and off but it did nothing.
I can successfully ping computers on my internal LAN and on the ISP's
internal LAN, including the PPTP server. The pptp-client connects with no
errors, as shown on the monitor. But I can't get the packets to or from the
WAN. I am not a total newbie in internet routing and the D-Link device
obviously has no problems routing and masquerading my setup, so it's
obviously a misconfiguration issue!

Please, anyone? Any help or advice would be GREATLY appreciated.

Thanks in advance,

Nick

_______________________________________________
ALL POSTS SHOULD BE ABOUT GENERAL ROUTEROS QUESTIONS
To post to the list, address emails to ***@bruno.pmi.lv
To unsubscribe/subscribe: email to RouterOS-***@bruno.pmi.lv ,
with text in the body "unsubscribe <password>" or "subscribe"
Kevin Summers
2004-05-23 20:19:24 UTC
Permalink
If the ISP is using DHCP on their PPTP based network it would be
better to just configure that interface to use DHCP, then establish
the PPTP connection. Check the box for "add-default-route" and
take out what you put in for yourself as the default route.

This may help it establish a connection.

Kevin Summers
KISTech Internet
www.kistech.com



-----Original Message-----
From: routeros-***@bruno.pmi.lv
[mailto:routeros-***@bruno.pmi.lv]On Behalf Of Nick Dvoeglazov
Sent: Sunday, May 23, 2004 12:17 PM
To: ***@bruno.pmi.lv
Subject: [MikroTik] Internet access via PPTP-client. Please help!


Hello, list,

I hope anyone can help me with the problem which has been annoying me for
months now. I've read the manual, the entire mail-list archive and
intensively
searched the net, but to no avail...

My local ISP uses ethernet and a central PPTP-server as means of accessing
the Internet. The service is aimed mostly at end-users using Windows
machines

and there has been no problems connecting via the Windows PPTP client. The
established PPP connection assigns a real static IP address and both DNS
names. The internal LAN is 10.0.*.* network with 10.0.0.1 being the
PPTP-server.
Until now, I've been using D-Link DI-804HV 4-port router. I use it to
masquerade 3 machines in my internal network, which is 192.168.0.0/24.
Here is where the problem appears: the D-Link router hangs every 2-3 days
and the only thing I can do to reestablish communications is to power-cycle
the unit. There is a server in the DMZ-zone behind the router so this
behaviour is totally unacceptable. The support at D-Link was less than
helpful and just ignored my posts in the forum and e-mails.

I've assembled a small PC router with 3 ethernet interfaces and installed
RouterOS on it. (I've had no luck setting up the pptp-client in FreeBSD).
I configured the "ether1" interface to my ISP local network with the
following settings.

IP/Netmask: 10.1.52.22/24

Next, I created a static route to 10.0.0.1/32 (the providers' PPTP server)
using the gateway 10.1.52.1 (supplied by the ISP)

I've also configured the "ether2" interface for use over my internal LAN,
with IP/Netmask being 192.168.0.100/24

Next, I created a pptp-client interface named "vpn" and assigned all the
necessary properties to it (i.e the address of the PPTP server = 10.0.0.1,
login & password, etc.)
There is definitely something I am missing here. I assume I am doing
something wrong in the "ip route" section. I've tried turning the
"add-default-route" property on and off but it did nothing.
I can successfully ping computers on my internal LAN and on the ISP's
internal LAN, including the PPTP server. The pptp-client connects with no
errors, as shown on the monitor. But I can't get the packets to or from the
WAN. I am not a total newbie in internet routing and the D-Link device
obviously has no problems routing and masquerading my setup, so it's
obviously a misconfiguration issue!

Please, anyone? Any help or advice would be GREATLY appreciated.

Thanks in advance,

Nick

_______________________________________________
ALL POSTS SHOULD BE ABOUT GENERAL ROUTEROS QUESTIONS
To post to the list, address emails to ***@bruno.pmi.lv
To unsubscribe/subscribe: email to RouterOS-***@bruno.pmi.lv ,
with text in the body "unsubscribe <password>" or "subscribe"
_______________________________________________
ALL POSTS SHOULD BE ABOUT GENERAL ROUTEROS QUESTIONS
To post to the list, address emails to ***@bruno.pmi.lv
To unsubscribe/subscribe: email to RouterOS-***@bruno.pmi.lv ,
with text in the body "unsubscribe <password>" or "subscribe"
Postmaster
2004-05-23 21:02:41 UTC
Permalink
Thanks for the quick reply, Kevin,

Yes, the ISP is using DHCP to provide all network settings to the PPTP
connection. But the ethernet interface itself has to be configured manually.
I've enabled the "add-default-route" property and took out the default route
for the interface - but then, the PPTP-client can't contact the PPTP server.

Also, if I understand correctly, the "add-default-route" property just makes
the PPTP-server the default route for the pptp-client interface.

I don't know what to look for anymore. I am at a dead-end now. :-(

-----Original Message-----
From: routeros-***@bruno.pmi.lv [mailto:routeros-***@bruno.pmi.lv]
On Behalf Of Kevin Summers
Sent: Monday, May 24, 2004 12:19 AM
To: General questions about MikroTik RouterOS
Subject: RE: [MikroTik] Internet access via PPTP-client. Please help!


If the ISP is using DHCP on their PPTP based network it would be better to
just configure that interface to use DHCP, then establish the PPTP
connection. Check the box for "add-default-route" and take out what you put
in for yourself as the default route.

This may help it establish a connection.

_______________________________________________
ALL POSTS SHOULD BE ABOUT GENERAL ROUTEROS QUESTIONS
To post to the list, address emails to ***@bruno.pmi.lv
To unsubscribe/subscribe: email to RouterOS-***@bruno.pmi.lv ,
with text in the body "unsubscribe <password>" or "subscribe"

Loading...