Russian Users MikroTik | Форум пользователей MikroTik

Интернета на компьютере то же нет, но pptp подымается, и нет доступа на микрот из вне

через консоль /export сделайте, когда pptp подключен и сюда выложите результат.

[admin@MikroTik] > /export
# jan/02/1970 17:27:02 by RouterOS 6.5
# software id = N3YW-HH8T
#
/interface ethernet
set [ find default-name=ether1 ] mac-address=D4:CA:6D:CF:B5:A6 name=\
ether1-gateway
set [ find default-name=ether2 ] mac-address=D4:CA:6D:CF:B5:A7 name=\
ether2-master-local
set [ find default-name=ether3 ] mac-address=D4:CA:6D:CF:B5:A8 master-port=\
ether2-master-local name=ether3-slave-local
set [ find default-name=ether4 ] mac-address=D4:CA:6D:CF:B5:A9 master-port=\
ether2-master-local name=ether4-slave-local
set [ find default-name=ether5 ] mac-address=D4:CA:6D:CF:B5:AA master-port=\
ether2-master-local name=ether5-slave-local
/interface pptp-client
add connect-to=vpn.local disabled=no max-mru=1400 max-mtu=1400 name=pptp-out1 \
password=xxxxxx user=xxxxxx
/ip neighbor discovery
set pptp-out1 discover=no
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m \
mac-cookie-timeout=3d
/ip pool
add name=pool ranges=192.168.0.10-192.168.0.254
/ip dhcp-server
add address-pool=pool disabled=no interface=ether2-master-local name=dhcp-serv
/system logging action
set 0 memory-lines=100
set 1 disk-lines-per-file=100
/ip address
add address=192.168.0.1/24 comment="default configuration" interface=\
ether2-master-local network=192.168.0.0
add address=172.25.3.6/32 comment=wan interface=ether1-gateway network=\
172.25.3.1
/ip dhcp-server network
add address=192.168.0.0/24 comment="default configuration" dns-server=\
192.168.0.1 gateway=192.168.0.1 netmask=24
/ip dns
set allow-remote-requests=yes servers=172.22.0.1
/ip dns static
add address=192.168.88.1 name=router
/ip firewall filter
add chain=input in-interface=ether1-gateway protocol=tcp
add chain=input in-interface=pptp-out1 protocol=tcp
add chain=input protocol=icmp
/ip firewall nat
add action=masquerade chain=srcnat comment=Wan out-interface=ether1-gateway
add action=masquerade chain=srcnat out-interface=pptp-out1
/ip route
add distance=1 gateway=172.25.3.1
/ip service
set api disabled=yes
[admin@MikroTik] >

Вот, опять два маскарада))

Как решить?

вы когда создавали pptp клиента, забыли поставить галку add default route

pptp соединение удалил и заново поставил с этой галкой не помогло

/ip route print
/ip firewall nat print
c подключенным новым соединением

[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 172.25.3.1 1
1 DS 0.0.0.0/0 10.128.0.1 1
2 ADC 10.128.0.1/32 xx.xxx.xx.xxx pptp-out1 0
3 ADC 172.25.3.1/32 172.25.3.6 ether1-gateway 0
4 ADC 192.168.0.0/24 192.168.0.1 ether2-master-l... 0
[admin@MikroTik] >

[admin@MikroTik] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; Wan
chain=srcnat action=masquerade out-interface=ether1-gateway

1 chain=srcnat action=masquerade out-interface=pptp-out1
[admin@MikroTik] >