Follow us on...
Follow us on G+ Follow us on Twitter Follow us on Facebook Watch us on YouTube
Register
Results 1 to 11 of 11
  1. #1
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0

    PPTP Server - connected clients use my internet traffic

    Hi all,

    First of all I want to say that this is a great community, I got many issues solved with my Mikrotik reading forum and wiki, thank you for that.

    Now to get to my issue...

    My Mikrotik is connected to another office using IPsec this connection is used so my users wold have access to this IP 172.20.XXX.10, if IPsec is dropped user can't have access to 172.20.XXX.10 and the program that they work with is not operating. Now, other users from different companies connect with PPTP to my mikrotik so they would have access to 172.20.XXX.10. The problem is that users connected by PPTP use my internet traffic and that is NOT OK with me, so I just drop all packets with firewall and leave only access to 172.20.XXX.10 but this upset the users, because they can use the program but they don't have internet because I'm blocking them, but they won't to work with the program and having internet at the same time.
    If users untick "Use default gateway on remote network" in PPTP properties then the program won't work, because they don't have access to 172.20.XXX.10 but they have internet (using their own gateway).

    Now I want users that connect to my Mikrotik using PPTP to be able to have access 172.20.XXX.10 meaning that the program will work and at the same time use their own internet and not mine.

    If someone could help me with this issue I would really appreciate, need to solve this quickly cose I'm having headaches.

    Waiting for replies, thank you in advance.

    Click here to enlarge

    When using default gateway on remote network
    Click here to enlarge

    When NOT using default gateway on remote network
    Click here to enlarge
    Last edited by EugenX; 25-09-2013 at 20:30.

  2. #2
    Status
    Offline
    ferrycupu's Avatar
    Member Super Senior
    Join Date
    Jan 2009
    Location
    Jakarta
    Posts
    564
    Reviews
    Read 0 Reviews
    Downloads
    8
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by EugenX Click here to enlarge
    Hi all,

    First of all I want to say that this is a great community, I got many issues solved with my Mikrotik reading forum and wiki, thank you for that.

    Now to get to my issue...

    My Mikrotik is connected to another office using IPsec this connection is used so my users wold have access to this IP 172.20.XXX.10, if IPsec is dropped user can't have access to 172.20.XXX.10 and the program that they work with is not operating. Now, other users from different companies connect with PPTP to my mikrotik so they would have access to 172.20.XXX.10. The problem is that users connected by PPTP use my internet traffic and that is NOT OK with me, so I just drop all packets with firewall and leave only access to 172.20.XXX.10 but this upset the users, because they can use the program but they don't have internet because I'm blocking them, but they won't to work with the program and having internet at the same time.
    If users untick "Use default gateway on remote network" in PPTP properties then the program won't work, because they don't have access to 172.20.XXX.10 but they have internet (using their own gateway).

    Now I want users that connect to my Mikrotik using PPTP to be able to have access 172.20.XXX.10 meaning that the program will work and at the same time use their own internet and not mine.

    If someone could help me with this issue I would really appreciate, need to solve this quickly cose I'm having headaches.

    Waiting for replies, thank you in advance.

    When using default gateway on remote network
    Click here to enlarge

    When NOT using default gateway on remote network
    Click here to enlarge

    what your end device client to connect PPTP ??
    capture your ppp secret dan ppp profile please

    sorry my english so bad
    Last edited by ferrycupu; 25-09-2013 at 20:05.

  3. #3
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Hello,

    English is not a problem as long as we understand each other.

    Clients connect using Windows VPN utility, no other special software.

    Below you can see PPTP connection log on Mikrotik:

    Code:
    14:32:26 pptp,ppp,info !debug: <pptp-0>: waiting for call... 
    14:32:26 pptp,debug,packet !debug: rcvd Start-Control-Connection-Request from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     protocol-version=0x0100 
    14:32:26 pptp,debug,packet !debug:     framing-capabilities=1 
    14:32:26 pptp,debug,packet !debug:     bearer-capabilities=1 
    14:32:26 pptp,debug,packet !debug:     maximum-channels=0 
    14:32:26 pptp,debug,packet !debug:     firmware-revision=3790 
    14:32:26 pptp,debug,packet !debug:     host-name= 
    14:32:26 pptp,debug,packet !debug:     vendor-name=Microsoft 
    14:32:26 pptp,debug,packet !debug: sent Start-Control-Connection-Reply to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     protocol-version=0x0100 
    14:32:26 pptp,debug,packet !debug:     result-code=1 
    14:32:26 pptp,debug,packet !debug:     error-code=0 
    14:32:26 pptp,debug,packet !debug:     framing-capabilities=2 
    14:32:26 pptp,debug,packet !debug:     bearer-capabilities=0 
    14:32:26 pptp,debug,packet !debug:     maximum-channels=0 
    14:32:26 pptp,debug,packet !debug:     firmware-revision=1 
    14:32:26 pptp,debug,packet !debug:     host-name=MikroTik 
    14:32:26 pptp,debug,packet !debug:     vendor-name=MikroTik 
    14:32:26 pptp,debug,packet !debug: rcvd Outgoing-Call-Request from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     call-id=1998 
    14:32:26 pptp,debug,packet !debug:     call-serial-number=2 
    14:32:26 pptp,debug,packet !debug:     minimum-bps=300 
    14:32:26 pptp,debug,packet !debug:     maximum-bps=100000000 
    14:32:26 pptp,debug,packet !debug:     bearer-type=3 
    14:32:26 pptp,debug,packet !debug:     framing-type=3 
    14:32:26 pptp,debug,packet !debug:     packet-recv-window-size=64 
    14:32:26 pptp,debug,packet !debug:     packet-processing-delay=0 
    14:32:26 pptp,debug,packet !debug:     phone-number-length=0 
    14:32:26 pptp,debug,packet !debug:     phone-number= 
    14:32:26 pptp,debug,packet !debug:     subaddress= 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP open 
    14:32:26 pptp,debug,packet !debug: sent Outgoing-Call-Reply to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     call-id=130 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     result-code=1 
    14:32:26 pptp,debug,packet !debug:     error-code=0 
    14:32:26 pptp,debug,packet !debug:     cause-code=0 
    14:32:26 pptp,debug,packet !debug:     connect-speed=100000 
    14:32:26 pptp,debug,packet !debug:     packet-recv-window-size=100 
    14:32:26 pptp,debug,packet !debug:     packet-processing-delay=0 
    14:32:26 pptp,debug,packet !debug:     physical-channel-id=0 
    14:32:26 pptp,debug,packet !debug: rcvd Set-Link-Info from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=130 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug: sent Set-Link-Info to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,ppp,debug,packet !debug: .0.189>: sent  <192.168.0.189>: rcvd  <192.168.0.189>: sent  <192.168.0.189>: rcvd  <212.43.XXX.XX>: rcvd  <212.43.XXX.XX>: rcvd LCP ConfReq id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <pcomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <accomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1460> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x4eded8c4> 
    14:32:26 pptp,ppp,debug,packet !debug:    <auth  mschap2> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfRej id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:    <pcomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <accomp> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ConfAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1460> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x4eded8c4> 
    14:32:26 pptp,ppp,debug,packet !debug:    <auth  mschap2> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP opened 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP Ident id=0x2 
    14:32:26 pptp,ppp,debug,packet !debug:     <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:     MSRASV5.20 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP Ident id=0x3 
    14:32:26 pptp,ppp,debug,packet !debug:     <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:     MSRAS-0-SERVER 
    14:32:26 pptp,debug,packet !debug: rcvd Set-Link-Info from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=130 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug: sent Set-Link-Info to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CHAP Challenge id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <challenge len=10> 
    14:32:26 pptp,ppp,debug,packet !debug:     <name MikroTik> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CHAP Response id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <response len=31> 
    14:32:26 pptp,ppp,debug,packet !debug:     <name eugen> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CHAP Success id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     S=AC336E140E13F02A3B1043C9FA3753E1A7513B5F 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CBCP CallbackReq id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,info !debug: <pptp-0>: authenticated 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP open 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent MPLSCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP open 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000060> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CBCP CallbackResp id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CBCP CallbackAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ProtRej id=0x4 
    14:32:26 pptp,ppp,debug,packet !debug:      82 81 01 01 00 04 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfReq id=0x5 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 10000e0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfNak id=0x5 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x6 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfRej id=0x6 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfReq id=0x7 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfAck id=0x7 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x8 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfNak id=0x8 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x9 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfAck id=0x9 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP timer 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000060> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfNak id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x3 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfAck id=0x3 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP opened 
    14:32:27 pptp,ppp,info !debug: <pptp-0>: using encoding - MPPE128 stateless 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP timer 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfReq id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfAck id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP opened 
    14:32:27 pptp,ppp,info !debug: <pptp-0>: connected 
    14:32:27 pptp,ppp,info,account !debug: eugen logged in, 192.168.0.220 
    14:32:38 pptp,debug,packet !debug: rcvd Echo-Request from 192.168.0.189 
    14:32:38 pptp,debug,packet !debug:     identifier=419430400 
    14:32:38 pptp,debug,packet !debug: sent Echo-Reply to 192.168.0.189 
    14:32:38 pptp,debug,packet !debug:     identifier=419430400 
    14:32:38 pptp,debug,packet !debug:     result-code=1 
    14:32:38 pptp,debug,packet !debug:     error-code=0 
    14:32:52 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP TermReq id=0xa 
    14:32:52 pptp,ppp,debug,packet !debug:     (\86\07\A2\00<\CDt\00\00\00\00 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP closed 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP closed 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP down event in starting state 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP closed 
    14:32:52 pptp,ppp,info,account !debug: eugen logged out, 26 185861 17314 386 249 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP down event in starting state 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP lowerdown 
    14:32:52 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP TermAck id=0xa 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerdown 
    14:32:52 pptp,ppp,info !debug: <pptp-eugen>: terminating... 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP down event in starting state 
    14:32:52 pptp,ppp,info !debug: <pptp-eugen>: disconnected 
    [admin@MikroTik] >

  4. #4
    Status
    Offline
    ferrycupu's Avatar
    Member Super Senior
    Join Date
    Jan 2009
    Location
    Jakarta
    Posts
    564
    Reviews
    Read 0 Reviews
    Downloads
    8
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by EugenX Click here to enlarge
    Hello,

    English is not a problem as long as we understand each other.

    Clients connect using Windows VPN utility, no other special software.

    Below you can see PPTP connection log on Mikrotik:

    Code:
    14:32:26 pptp,ppp,info !debug: <pptp-0>: waiting for call... 
    14:32:26 pptp,debug,packet !debug: rcvd Start-Control-Connection-Request from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     protocol-version=0x0100 
    14:32:26 pptp,debug,packet !debug:     framing-capabilities=1 
    14:32:26 pptp,debug,packet !debug:     bearer-capabilities=1 
    14:32:26 pptp,debug,packet !debug:     maximum-channels=0 
    14:32:26 pptp,debug,packet !debug:     firmware-revision=3790 
    14:32:26 pptp,debug,packet !debug:     host-name= 
    14:32:26 pptp,debug,packet !debug:     vendor-name=Microsoft 
    14:32:26 pptp,debug,packet !debug: sent Start-Control-Connection-Reply to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     protocol-version=0x0100 
    14:32:26 pptp,debug,packet !debug:     result-code=1 
    14:32:26 pptp,debug,packet !debug:     error-code=0 
    14:32:26 pptp,debug,packet !debug:     framing-capabilities=2 
    14:32:26 pptp,debug,packet !debug:     bearer-capabilities=0 
    14:32:26 pptp,debug,packet !debug:     maximum-channels=0 
    14:32:26 pptp,debug,packet !debug:     firmware-revision=1 
    14:32:26 pptp,debug,packet !debug:     host-name=MikroTik 
    14:32:26 pptp,debug,packet !debug:     vendor-name=MikroTik 
    14:32:26 pptp,debug,packet !debug: rcvd Outgoing-Call-Request from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     call-id=1998 
    14:32:26 pptp,debug,packet !debug:     call-serial-number=2 
    14:32:26 pptp,debug,packet !debug:     minimum-bps=300 
    14:32:26 pptp,debug,packet !debug:     maximum-bps=100000000 
    14:32:26 pptp,debug,packet !debug:     bearer-type=3 
    14:32:26 pptp,debug,packet !debug:     framing-type=3 
    14:32:26 pptp,debug,packet !debug:     packet-recv-window-size=64 
    14:32:26 pptp,debug,packet !debug:     packet-processing-delay=0 
    14:32:26 pptp,debug,packet !debug:     phone-number-length=0 
    14:32:26 pptp,debug,packet !debug:     phone-number= 
    14:32:26 pptp,debug,packet !debug:     subaddress= 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP open 
    14:32:26 pptp,debug,packet !debug: sent Outgoing-Call-Reply to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     call-id=130 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     result-code=1 
    14:32:26 pptp,debug,packet !debug:     error-code=0 
    14:32:26 pptp,debug,packet !debug:     cause-code=0 
    14:32:26 pptp,debug,packet !debug:     connect-speed=100000 
    14:32:26 pptp,debug,packet !debug:     packet-recv-window-size=100 
    14:32:26 pptp,debug,packet !debug:     packet-processing-delay=0 
    14:32:26 pptp,debug,packet !debug:     physical-channel-id=0 
    14:32:26 pptp,debug,packet !debug: rcvd Set-Link-Info from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=130 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug: sent Set-Link-Info to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,ppp,debug,packet !debug: .0.189>: sent  <192.168.0.189>: rcvd  <192.168.0.189>: sent  <192.168.0.189>: rcvd  <212.43.XXX.XX>: rcvd  <212.43.XXX.XX>: rcvd LCP ConfReq id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <pcomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <accomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1460> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x4eded8c4> 
    14:32:26 pptp,ppp,debug,packet !debug:    <auth  mschap2> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfRej id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:    <pcomp> 
    14:32:26 pptp,ppp,debug,packet !debug:    <accomp> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ConfAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1460> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x4eded8c4> 
    14:32:26 pptp,ppp,debug,packet !debug:    <auth  mschap2> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP ConfAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:    <mru 1400> 
    14:32:26 pptp,ppp,debug,packet !debug:    <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:    <callback 0x06> 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP opened 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP Ident id=0x2 
    14:32:26 pptp,ppp,debug,packet !debug:     <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:     MSRASV5.20 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP Ident id=0x3 
    14:32:26 pptp,ppp,debug,packet !debug:     <magic 0x288607a2> 
    14:32:26 pptp,ppp,debug,packet !debug:     MSRAS-0-SERVER 
    14:32:26 pptp,debug,packet !debug: rcvd Set-Link-Info from 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=130 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug: sent Set-Link-Info to 212.43.XXX.XX 
    14:32:26 pptp,debug,packet !debug:     peers-call-id=1998 
    14:32:26 pptp,debug,packet !debug:     send-accm=0xffffffff 
    14:32:26 pptp,debug,packet !debug:     receive-accm=0xffffffff 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CHAP Challenge id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <challenge len=10> 
    14:32:26 pptp,ppp,debug,packet !debug:     <name MikroTik> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CHAP Response id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <response len=31> 
    14:32:26 pptp,ppp,debug,packet !debug:     <name eugen> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CHAP Success id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     S=AC336E140E13F02A3B1043C9FA3753E1A7513B5F 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CBCP CallbackReq id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,info !debug: <pptp-0>: authenticated 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP open 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent MPLSCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP open 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP lowerup 
    14:32:26 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP open 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000060> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CBCP CallbackResp id=0x0 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CBCP CallbackAck id=0x1 
    14:32:26 pptp,ppp,debug,packet !debug:      01 02 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP ProtRej id=0x4 
    14:32:26 pptp,ppp,debug,packet !debug:      82 81 01 01 00 04 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfReq id=0x5 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 10000e0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfNak id=0x5 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x6 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfRej id=0x6 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfReq id=0x7 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfAck id=0x7 
    14:32:26 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x8 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 0.0.0.0> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfNak id=0x8 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfReq id=0x9 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:26 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfAck id=0x9 
    14:32:26 pptp,ppp,debug,packet !debug:     <addr 192.168.0.220> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-dns 8.8.8.8> 
    14:32:26 pptp,ppp,debug,packet !debug:     <ms-wins 8.8.4.4> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP timer 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000060> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfNak id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent CCP ConfReq id=0x3 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd CCP ConfAck id=0x3 
    14:32:27 pptp,ppp,debug,packet !debug:     <mppe 1000040> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP opened 
    14:32:27 pptp,ppp,info !debug: <pptp-0>: using encoding - MPPE128 stateless 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP timer 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent IPCP ConfReq id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:27 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd IPCP ConfAck id=0x2 
    14:32:27 pptp,ppp,debug,packet !debug:     <addr 192.168.0.219> 
    14:32:27 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP opened 
    14:32:27 pptp,ppp,info !debug: <pptp-0>: connected 
    14:32:27 pptp,ppp,info,account !debug: eugen logged in, 192.168.0.220 
    14:32:38 pptp,debug,packet !debug: rcvd Echo-Request from 192.168.0.189 
    14:32:38 pptp,debug,packet !debug:     identifier=419430400 
    14:32:38 pptp,debug,packet !debug: sent Echo-Reply to 192.168.0.189 
    14:32:38 pptp,debug,packet !debug:     identifier=419430400 
    14:32:38 pptp,debug,packet !debug:     result-code=1 
    14:32:38 pptp,debug,packet !debug:     error-code=0 
    14:32:52 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: rcvd LCP TermReq id=0xa 
    14:32:52 pptp,ppp,debug,packet !debug:     (\86\07\A2\00<\CDt\00\00\00\00 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP closed 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: CCP closed 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: BCP down event in starting state 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPCP closed 
    14:32:52 pptp,ppp,info,account !debug: eugen logged out, 26 185861 17314 386 249 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: IPV6CP down event in starting state 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: MPLSCP lowerdown 
    14:32:52 pptp,ppp,debug,packet !debug:  <212.43.XXX.XX>: sent LCP TermAck id=0xa 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerdown 
    14:32:52 pptp,ppp,info !debug: <pptp-eugen>: terminating... 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP lowerdown 
    14:32:52 pptp,ppp,debug !debug: <212.43.XXX.XX>: LCP down event in starting state 
    14:32:52 pptp,ppp,info !debug: <pptp-eugen>: disconnected 
    [admin@MikroTik] >
    what you've set this section


    CMIIW

  5. #5
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    VPN pool is my LAN (192.168.0.0/24).
    In "Routes" option I didn't set anything as you can see in the screenshot.

    Click here to enlarge

  6. #6
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    ferrycupu? anybody?

  7. #7
    Status
    Offline
    pos_ronda's Avatar
    VIP Member
    Join Date
    Aug 2009
    Location
    Sleman, Indonesia
    Posts
    887
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    you should edit routing table on your pptp-client
    open command prompt and type route /?
    Gunakan FreeRadius sebagai pengganti user manager

  8. #8
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Click here to enlarge Originally Posted by pos_ronda Click here to enlarge
    you should edit routing table on your pptp-client
    open command prompt and type route /?
    You're saying I have to add a static route on Windows clients?

  9. #9
    Status
    Offline
    Noeg Waskito's Avatar
    Member Senior
    Join Date
    Aug 2012
    Location
    Jogja
    Posts
    405
    Reviews
    Read 0 Reviews
    Downloads
    1
    Uploads
    0
    Feedback Score
    0


    you must set router address in router option

  10. #10
    Status
    Offline
    xeon's Avatar
    Verified Account - Partner
    Join Date
    Mar 2008
    Location
    DKI Jakarta
    Posts
    1,539
    Reviews
    Read 0 Reviews
    Downloads
    3
    Uploads
    0
    Feedback Score
    2 (100%)
    Click here to enlarge Originally Posted by EugenX Click here to enlarge
    Hi all,

    First of all I want to say that this is a great community, I got many issues solved with my Mikrotik reading forum and wiki, thank you for that.

    Now to get to my issue...

    My Mikrotik is connected to another office using IPsec this connection is used so my users wold have access to this IP 172.20.XXX.10, if IPsec is dropped user can't have access to 172.20.XXX.10 and the program that they work with is not operating. Now, other users from different companies connect with PPTP to my mikrotik so they would have access to 172.20.XXX.10. The problem is that users connected by PPTP use my internet traffic and that is NOT OK with me, so I just drop all packets with firewall and leave only access to 172.20.XXX.10 but this upset the users, because they can use the program but they don't have internet because I'm blocking them, but they won't to work with the program and having internet at the same time.
    If users untick "Use default gateway on remote network" in PPTP properties then the program won't work, because they don't have access to 172.20.XXX.10 but they have internet (using their own gateway).

    Now I want users that connect to my Mikrotik using PPTP to be able to have access 172.20.XXX.10 meaning that the program will work and at the same time use their own internet and not mine.

    If someone could help me with this issue I would really appreciate, need to solve this quickly cose I'm having headaches.

    Waiting for replies, thank you in advance.
    This should be done on the client side, leave the "use default gateway on remote network" unticked.
    And then add a static route
    route<space>add<space>-p<space><destination n/w><space>mask<space><destination n/w mask><space><gateway>

    Example : route add -p 172.20.XXX.10 mask 255.255.255.0 192.168.0.1

    -p stands for Permanent

  11. #11
    Status
    Offline
    EugenX's Avatar
    Newbie
    Join Date
    Nov 2012
    Posts
    22
    Reviews
    Read 0 Reviews
    Downloads
    0
    Uploads
    0
    Feedback Score
    0
    Thanks xeon,

    I already did it, although I wanted to solve it on Mikrotik side I think there is no other option than adding a permanent route in client side.

    Code:
    route -p -4 add 172.20.XXX.10 mask 255.255.255.0 <GATEWAY> metric 2 if 38
    For other that will use this solution, please don't forget to add the [if INTERFACE] option, otherwise it will not work after restart even if the [-p] option is set.
    To find out what interface number you have after you setup the PPTP connection, in cmd type route print and see in interface list what number your connection has.

    Good luck to all and thank you once again.

 

 

Thread Information

Users Browsing this Thread

There are currently 2 users browsing this thread. (0 members and 2 guests)

Similar Threads

  1. Replies: 8
    Last Post: 25-03-2013, 13:59
  2. Seting PPTP Server
    By sukhoi37 in forum Tutorial
    Replies: 17
    Last Post: 09-12-2010, 20:21
  3. [help] PPPoE server PPTP server
    By edhi_putra in forum General Networking
    Replies: 3
    Last Post: 03-12-2009, 23:29
  4. VPN Server menggunakan PPtP
    By abdillah in forum General Networking
    Replies: 4
    Last Post: 03-12-2009, 02:34
  5. PPTP Client Dan PPTP Server Di Mikrotik
    By buluxs in forum Beginner Basics
    Replies: 12
    Last Post: 19-08-2009, 13:15

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •