Answer the question
In order to leave comments, you need to log in
Mikrotik static routing from a network of addresses to a bridge not accessing vpn network addresses, where to dig?
Hi all. The task is that there are routes that work on the device itself, but do not work from the local subnet, it is impossible to register the route so that local clients look at the routes of the router
1. There is a local subnet 192.168.88.1-192.168.88.255 local bridge
2. There is a dynamic subnet external from the eth1 interface
3. There is a local subnet with vpn 10.0.0.1-10.0.0.100 from the pppt interface
Example, there is a static route to the address 176.9.138.143, it works from the router, but does not work from network 1.
The problem lies in the fact that network 3 10.0.0.1-10.0.0.100 is not available from network 1 192.168.88.1-192.168.88.255
Answer the question
In order to leave comments, you need to log in
Wangyu. Most likely, the VPN server does not have a route to the network 192.168.88.0/24.
How to decide?
- enable NAT on the VPN interface
- register a route to the network 192.168.88.0/24 on the VPN server.
To test my theory, put src address=192.168.88.1 in your trace.
Didn't find what you were looking for?
Ask your questionAsk a Question
731 491 924 answers to any question