R
R
Roc272020-03-08 14:43:23
Mikrotik
Roc27, 2020-03-08 14:43:23

Why are internal addresses visible on the external interface?

Hello.
Two Mikrotik routers are connected via pptp.
The scheme is as follows:
MT1 is connected to MT2. The MT1 network accesses the Internet through MT2.
MT1 has an IP address of 192.168.88.1
MT2 has an IP address of 192.168.1.1
PPTP has an IP address of 10.0.8.1-10.0.8.2
The problem is this:
If you go to MT2 in the interfaces and select torch on the PPTP interface, then I can see which packets are on the network MT1 are intended. For example 192.168.88.100 -> 8.8.8.8, although in theory it should display 10.0.8.1 -> 8.8.8.8.
Also, if you go to MT2 in the interfaces and select torch on the ether4-WAN interface, then I can also see which packets in the MT1 network are intended for whom. For example 192.168.88.100 -> 8.8.8.8, although in theory it should display 192.168.1.1 -> 8.8.8.8.
I want to make it so that MT2 does not see which packets in the MT1 network are intended for whom.
Masquerading on MT1 is set to pptp, and on MT2 to ether4-WAN.

Answer the question

In order to leave comments, you need to log in

1 answer(s)
N
nApoBo3, 2020-03-08
@nApoBo3

This means that masquerading is not configured correctly.
Use srcnat instead of mascarade.

Didn't find what you were looking for?

Ask your question

Ask a Question

731 491 924 answers to any question