Но нет пинга между клиентами.
Маршрут прописал на микротике.
Код: Выделить всё
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 192.168.1.1 1
1 ADC 192.168.1.0/24 192.168.1.59 ether1 0
2 ADC 192.168.88.0/24 192.168.88.1 bridge 0
3 S 192.168.100.0/24 192.168.100.1 1
4 ADC 192.168.100.2/32 192.168.100.1 <pptp-camera1> 0
Код: Выделить всё
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough
1 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
2 chain=input action=accept protocol=tcp in-interface=ether1 dst-port=1723 log=no log-prefix=""
3 chain=input action=accept protocol=tcp dst-port=8291 log=no log-prefix=""
4 ;;; defconf: drop invalid
chain=input action=drop connection-state=invalid
5 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp
6 ;;; defconf: drop all not coming from LAN
chain=input action=drop in-interface-list=!LAN
7 ;;; defconf: accept in ipsec policy
chain=forward action=accept ipsec-policy=in,ipsec
8 ;;; defconf: accept out ipsec policy
chain=forward action=accept ipsec-policy=out,ipsec
9 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related
10 ;;; defconf: accept established,related, untracked
chain=forward action=accept connection-state=established,related,untracked
11 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid
12 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface-list=WAN
В чем ошибка может быть?
Спасибо!