У меня возникли проблемы с подключением к рабочей VPN через Mitrotik. Я могу успешно пинговать DC (192.168.20.10) с роутера, но не с каких-либо клиентов роутера. Когда я исследую это, я вижу, что DC на работе действительно пытается ответить на пинг, но ответ не проходит.
[mautobu@MikroTik] /interface> print detail
0 R name="PPTP-client" type="pptp-out" mtu=1350
[mautobu@MikroTik] /ip route> print detail
0 ADS dst-address=0.0.0.0/0 gateway=24.68.140.1 gateway-status=24.68.140.1 reachable via ether1-gateway distance=1 scope=30 target-scope=10 vrf-interface=ether1-gateway
1 ADC dst-address=10.20.1.0/24 pref-src=10.20.1.1 gateway=ether2-master-local gateway-status=ether2-master-local reachable distance=0 scope=10
2 ADC dst-address=24.68.140.0/22 pref-src=24.68.143.113 gateway=ether1-gateway gateway-status=ether1-gateway reachable distance=0 scope=10
3 A S dst-address=192.168.10.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via PPTP-client distance=1 scope=10 target-scope=10
4 ADC dst-address=192.168.15.254/32 pref-src=192.168.15.201 gateway=PPTP-client gateway-status=PPTP-client reachable distance=0 scope=10
5 A S dst-address=192.168.20.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via PPTP-client distance=1 scope=10 target-scope=10
[mautobu@MikroTik] /ip firewall filter> print detail
0 ;;; default configuration
chain=input action=accept protocol=icmp
1 ;;; default configuration
chain=input action=accept connection-state=established
2 ;;; default configuration
chain=input action=accept connection-state=related
3 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway
[mautobu@MikroTik] /interface> print detail
0 R name="PPTP-client" type="pptp-out" mtu=1350
[mautobu@MikroTik] /ip route> print detail
0 ADS dst-address=0.0.0.0/0 gateway=24.68.140.1 gateway-status=24.68.140.1 reachable via ether1-gateway distance=1 scope=30 target-scope=10 vrf-interface=ether1-gateway
1 ADC dst-address=10.20.1.0/24 pref-src=10.20.1.1 gateway=ether2-master-local gateway-status=ether2-master-local reachable distance=0 scope=10
2 ADC dst-address=24.68.140.0/22 pref-src=24.68.143.113 gateway=ether1-gateway gateway-status=ether1-gateway reachable distance=0 scope=10
3 A S dst-address=192.168.10.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via PPTP-client distance=1 scope=10 target-scope=10
4 ADC dst-address=192.168.15.254/32 pref-src=192.168.15.201 gateway=PPTP-client gateway-status=PPTP-client reachable distance=0 scope=10
5 A S dst-address=192.168.20.0/24 gateway=192.168.15.254 gateway-status=192.168.15.254 reachable via PPTP-client distance=1 scope=10 target-scope=10
[mautobu@MikroTik] /ip firewall filter> print detail
0 ;;; default configuration
chain=input action=accept protocol=icmp
1 ;;; default configuration
chain=input action=accept connection-state=established
2 ;;; default configuration
chain=input action=accept connection-state=related
3 ;;; default configuration
chain=input action=drop in-interface=ether1-gateway
