Score:0

IP Tunnel - First router is not sending traffic to the second one

cn flag

I'm a beginner when it comes to Mikrotik . I'm trying to run an IP tunnel between 2 RouterOS .

First Router is set up as PPTP and L2TP server and clients can connect and use the internet but what I want to do is to set up an IP tunnel so when clients are connected to the first server , their traffic is routed to the second router and then is sent to internet from there . In simple terms , I want my clients' internet IP to be the second Router's IP and all the traffic from first server to be sent to second server first , and then to the internet from there .

the two tunnels can ping each other but the first server is not sending the traffic to the second one . I think my issue is creating a route for this . I will paste the export logs below .

First Router ( PPTP & L2TP server ) export :

/interface ipip
add name=162.19.152.3 remote-address=162.19.152.3
/interface list
add name=WAN
add name=LAN
/ip pool
add name=pptp ranges=10.8.0.0/23
/ppp profile
add change-tcp-mss=yes dns-server=8.8.8.8,8.8.4.4 \
    local-address=pptp name=pptp only-one=yes \
    remote-address=pptp use-encryption=yes
add change-tcp-mss=yes dns-server=8.8.8.8,8.8.4.4 \
    local-address=pptp name=l2tp only-one=yes \
    remote-address=pptp use-encryption=yes
/tool user-manager customer
set admin access="own-routers,own-users,own-profiles,own-limi\
    ts,config-payment-gw"
/interface l2tp-server server
set default-profile=l2tp enabled=yes ipsec-secret=123456 \
    use-ipsec=required
/interface list member
add interface=ether1 list=WAN
add list=LAN
/interface pptp-server server
set authentication=chap,mschap1,mschap2 default-profile=pptp \
    enabled=yes
/ip address
add address=185.141.105.65/24 interface=ether1 network=\
    185.141.105.0
add address=185.141.105.65 interface=ether1 network=\
    172.27.7.229
add address=11.11.11.2/29 interface=162.19.152.3 network=\
    11.11.11.0
/ip cloud
set update-time=no
/ip firewall filter
add action=accept chain=input dst-port=1723 protocol=tcp
add action=accept chain=input dst-port=500 protocol=udp
/ip route
add distance=1 gateway=172.27.7.229
add distance=1 gateway=172.27.7.229
/ip service
set www disabled=yes
/ppp aaa
set interim-update=30s use-radius=yes
/radius
add address=51.xxx.xxx.188 secret=123456 service=ppp
/tool user-manager database
set db-path=user-manager

Second Router ( should accept traffic from first router and send it to internet ) export :

/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
/interface ipip
add name=185.141.105.65 remote-address=185.141.105.65
/interface list
add name=WAN
add name=LAN
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/interface list member
add interface=ether1 list=WAN
add list=LAN
/ip address
add address=162.19.152.3/24 interface=ether1 network=162.19.152.0
add address=11.11.11.1/29 interface=185.141.105.65 network=11.11.11.0
/ip dhcp-client
add disabled=no interface=ether1
/ip firewall nat
add action=masquerade chain=srcnat
/ip service
set www disabled=yes
/system identity
set name=RouterOS

I'm pretty sure the second router is not the issue and the configurations are OK . I think first Router is missing something . Maybe a route to the second one or a firewall rule . Can you please help me understand what is missing ?

Regards,

djdomi avatar
za flag
please explain to us what subnet ips you use, I can't see here a match. because 11. is a public ip. may you maybe wanted to use 10 instead?
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.