R
R
rt0012017-01-03 23:57:26
Mikrotik
rt001, 2017-01-03 23:57:26

How to set up RDP access from a local network to a machine connected via PPTP + Mangle?

Something doesn't work, I can't figure it out.
The task is as follows: a remote machine on Win2012 connects to the router via pptp, local network resources should not be available for it, but one machine from this local network should be able to connect to the remote machine via rdp using the above-mentioned pptp, nothing more can be done in that not to the other side.
The router settings are as follows: 2 providers work simultaneously. The differentiation between providers is carried out through address lists, at the expense of mangles. Raised the pptp server (10.1.0.1) on the router, the connection to it is established via the Internet (to the static IP of the first provider) from under Windows, the client is given a fixed address 10.1.0.254. Pings from the client go to the router - both to the server address (10.1.0.1) and to the router's local address (192.168.1.1). The client (10.1.0.254) pings from the router itself, but the client does not ping from local machines.
tracert shows that the traffic is going to the ISP and not to the pptp client. In the firewall connections, I see that the traffic from the local machine is marked as for the provider and, as I understand it, that's why it goes to it.
You need to add an exception in the mangles, that if the destination address is a remote machine (10.1.0.254), and the sender address is a specific local machine, then do not mark the traffic, right? Or is it done in some other way? I ask because the Internet cannot be turned off for a long time, so there is no way to experiment extra.
Thanks in advance!

Answer the question

In order to leave comments, you need to log in

1 answer(s)
H
HawK, 2017-01-04
@rt001

Исключения добавляются в правила с помощью символа "!" перед src и dst-адресами. Есть другой способ - можно продублировать нужные маршруты в соответствующие таблицы маршрутизации.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question