Hi Everyone,

I set-up PPTP VPN server on my RB450G, but I can't access it from anext door buildingbecause my Mikrotik adds a Dynamic (DAC) route to that subnet (... long story short - b/c I set-up failover between the two buildings on Eth3). I can connect to my PPTP server from anywhere else fine. If I disable that fail-over NIC, I can access the PPTP VPN fine.

There may be different solutions,but I have no need for that specific Dynamic route, so I think that I can just delete it, or prevent Mikrotik from adding it as a Dynamic route.

*i think* The root cause of this issue is that in my firewall, I have "Input" rule to allow PPTP port from outside. But if i try to connect from my next door building, the Mikrotik's "input" may not apply? Is this correct?

How would I delete that Dynamic route? It won't allow me to do it in WinBox...

Any other ideas?

Thanks in advance!

A 'DAC' route is a route to a directly connected network. You cannot delete it as long as you have an IP address on that network. It goes away when you remove the IP address on that network.

You probably need to rethink how the IP addresses are assigned, or you need a more specific route that overrides the DAC one for the PPtP server, or use a vlan, or run PPtP on both failover routers (depending on how you set up the failover).

Oh. I see now. Maybe I will try using a private IP address of the modem instead of a public IP address.

Thank You