Russian Users MikroTik | Форум пользователей MikroTik

Микротик 2
# sep/08/2020 17:49:14 by RouterOS 6.44.6
# software id = 1VLT-N68W
#
# model = RB951G-2HnD
# serial number = 96500BCA61DB
/interface bridge
add name=lan2
/interface wireless
set [ find default-name=wlan1 ] disabled=no mode=ap-bridge ssid=**********
/interface ethernet
set [ find default-name=ether1 ] mac-address=CC:32:E5:B5:32:9D
/interface l2tp-client
add allow=mschap2 connect-to=95.104.192.166 disabled=no mrru=1600 name=\
l2tp-out1 password="\********" user=********
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
12345678 wpa2-pre-shared-key=12345678
/ip pool
add name=dhcp_pool1 ranges=192.168.1.201-192.168.1.254
add name=dhcp_pool2 ranges=192.168.0.2-192.168.0.254
/ip dhcp-server
add address-pool=dhcp_pool2 disabled=no interface=lan2 name=dhcp1
/interface bridge port
add bridge=lan2 interface=ether2
add bridge=lan2 interface=ether3
add bridge=lan2 interface=ether4
add bridge=lan2 interface=ether5
add bridge=lan2 interface=wlan1
/ip address
add address=192.168.0.1/24 interface=lan2 network=192.168.0.0
add address=95.104.194.231/24 interface=ether1 network=95.104.194.0
/ip dhcp-server network
add address=192.168.0.0/24 dns-server=192.168.0.1 gateway=192.168.0.1
add address=192.168.1.0/24 dns-server=192.168.1.200 gateway=192.168.1.200
/ip dns
set allow-remote-requests=yes servers=213.87.2.88,213.87.2.89
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
/ip route
add distance=1 gateway=95.104.194.1
add distance=1 dst-address=192.168.1.0/24 gateway=172.16.30.1 pref-src=\
192.168.0.1
/system clock
set time-zone-name=Europe/Ulyanovsk

Микротик 1
# sep/08/2020 17:51:53 by RouterOS 6.43.4
# software id = R9VT-ZSU6
#
# model = 951G-2HnD
# serial number = 965009BFE79F
/interface bridge
add fast-forward=no name=Lan
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n disabled=no mode=ap-bridge \
ssid=Fenixauto
/interface ethernet
set [ find default-name=ether1 ] mac-address=08:C6:B3:29:C7:C7
/interface l2tp-server
add name=l2tp-in1 user=VPN-User
/interface wireless security-profiles
set [ find default=yes ] authentication-types=wpa-psk,wpa2-psk eap-methods="" \
mode=dynamic-keys supplicant-identity=MikroTik wpa-pre-shared-key=\
88422706607 wpa2-pre-shared-key=***********
/ip pool
add name=dhcp_pool1 ranges=192.168.1.10-192.168.1.150
add name=L2tp-pool ranges=172.16.30.1-172.16.30.10
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=Lan name=dhcp1
/ppp profile
add change-tcp-mss=no local-address=172.16.30.1 name=L2TP-Server only-one=no \
remote-address=L2tp-pool use-compression=yes use-encryption=yes use-mpls=\
no use-upnp=no
/interface bridge port
add bridge=Lan interface=ether2
add bridge=Lan interface=ether3
add bridge=Lan interface=ether4
add bridge=Lan interface=ether5
add bridge=Lan interface=wlan1
/interface l2tp-server server
set authentication=mschap2 default-profile=L2TP-Server enabled=yes
/ip address
add address=192.168.1.1/24 interface=Lan network=192.168.1.0
add address=95.104.192.166/25 interface=ether1 network=95.104.192.128
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes servers=213.87.2.88,95.104.192.41
/ip firewall filter
add action=accept chain=input connection-nat-state="" connection-state=new \
dst-port=1701 protocol=udp
add action=accept chain=input connection-state=established,related
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
add action=dst-nat chain=dstnat dst-port=******* in-interface=ether1 protocol=\
tcp to-addresses=192.168.1.111 to-ports=3389
add action=dst-nat chain=dstnat dst-port=****** in-interface=ether1 protocol=\
tcp to-addresses=192.168.1.111 to-ports=3389
add action=masquerade chain=srcnat out-interface=all-ppp
/ip route
add distance=1 gateway=95.104.192.129
add distance=1 dst-address=192.168.0.0/24 gateway=172.16.30.2 pref-src=\
192.168.1.1
/ppp secret
add local-address=172.16.30.1 name=VPN-User password="\*********" profile=\
L2TP-Server remote-address=172.16.30.2 service=l2tp
/system clock
set time-zone-name=Europe/Ulyanovsk
/system routerboard settings
set silent-boot=no

Проглядел я на сервере в NATе эту строчку:
Из-за нее и не работает.

Я вроде уже его отключал тестил, или значение маскарад надо на какой то другое менять?

Вообще убирать.
Никакого NAT'а в туннели не нужно.