K
K
Konstantin2018-03-11 19:20:01
Computer networks
Konstantin, 2018-03-11 19:20:01

PCs are not piping through OVPN, the network is not visible, what should I do?

Hello. Faced such problem which I can not overcome already as a week. There are two mikrotik hAP, which should connect the offices to each other. The task is to enable employees from office 2 to work with a shared folder on one of the PCs in office 1.
An OVPN server was raised on Mikrotik in office 1, and a client on Mikrotik in office 2. The problem is that PCs do not ping (ping from office 1 to 2 and vice versa), but at the same time, microtics are calmly pinged, as well as IP phones and printers that come after them.
Router config with OVPN server, behind which you need to see the ball on the PC:
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=new dst-port=80,8291 \
in-interface=BridgeALL protocol=tcp src-address=192.168.1.0/24
add action=accept chain=input connection-state=new dst-port=80,8291 \
in-interface=WAN protocol=tcp
add action=accept chain =input connection-state=new dst-port=53,123 \
in-interface=BridgeALL protocol=udp src-address=192.168.1.0/24
add action=accept chain=input connection-state=established,related
add action=accept chain= forward connection-state=established,new in-interface=\
BridgeALL out-interface=WAN src-address=192.168.1.0/24
add action=accept chain=forward connection-state=established,related \
dst-address=192.168.1.0 /24 in-interface=WAN out-interface=BridgeALL
add action=accept chain=output connection-state=!invalid
add action=accept chain=input comment=OVPN dst-port=1194 in-interface=WAN \
protocol=tcp
add action=accept chain=forward in-interface= out-interface=\
BridgeALL
add action=accept chain=forward in- interface=BridgeALL out-interface=\
add action=accept chain=forward comment=Office405 dst-address=192.168.2.0/24 \
src-address=192.168.1.0/24
add action=accept chain=forward dst-address=192.168. 1.0/24 src-address=\
192.168.2.0/24
add action=drop chain=input
/ip firewall nat
add action=masquerade chain=srcnat out-interface=WAN src-address=192.168.1.0/24
/ip route
add check -gateway=ping distance=1 gateway=86.110.195.93
add distance=1 dst-address=192.168.2.1/32 gateway=192.168.100.100 pref-src=\
192.168.1.1
Router config with OVPN client:
/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=new dst-port=80,8291 \
in-interface=BridgeAll protocol=tcp src-address=192.168.2.0/24
add action=accept chain=input connection-state=established,new dst-port =80,8291 \
in-interface=WAN protocol=tcp
add action=accept chain=input connection-state=new dst-port=53,123 protocol=udp \
src-address=192.168.2.0/24
add action=accept chain=input connection-state=established,related
add action=accept chain=output connection-state=!invalid
add action=accept chain=forward connection-state=established,new in-interface=\
BridgeAll out-interface=WAN src-address=192.168.2.0/24
add action=accept chain=forward connection-state=established,related \
dst -address=192.168.2.0/24 in-interface=WAN out-interface=BridgeAll
add action=accept chain=forward dst-address=192.168.2.0/24 src-address=\
192.168.1.0/24
add action=accept chain= forward dst-address=192.168.1.0/24 src-address=\
192.168.2.0/24
add action=accept chain=forward in-interface=all-ppp
add action=accept chain=forward comment=OVPN in-interface=BridgeAll \
out-interface=ovpn-client
add action=accept chain=forward in-interface=ovpn-client out-interface=\
BridgeAll
add action=accept chain=input dst-port=1194 in-interface=WAN protocol=tcp
add action=drop chain=input
/ip firewall nat
add action=masquerade chain=srcnat src-address=192.168.2.0/24
/ip route
add check-gateway=ping distance=1 gateway=86.110.195.57
add distance=1 dst-address=192.168.1.0/24 gateway=192.168.100.1 pref-src=\
192.168.2.1
Please help, I don't understand why everything is pinged anything but a PC.

Answer the question

In order to leave comments, you need to log in

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question