top100011 wrote:一切的原因都在於基本設定沒設好.
哇~感謝大大完整了...(恕刪)
首先您要在I-040GW設定映射:
將TCP Port:1723 映射至192.168.1.250 (PPTP)
將UDP Port:1701,500,4500 映射至192.168.1.250 (Ipsec/l2tp)
若能用透過DMZ直接將連線映射至192.168.1.250會更完美.
若您希望I-040GW網域的電腦可直接與RB750的網域(192.168.88.0/24)連結,
找到I-040GW的路由表,將:
dst-ip=192.168.88.0 subnet=255.255.255.0 gateway=192.168.1.250
interface=br0(或者Lan) metric=1
加入I-040GW路由表即可.
－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－－
RB750:
小弟將您所需要的全部匯出,您選擇性匯入欠缺的即可:
/ip address
add address=192.168.1.250/24 interface=ether1 network=192.168.1.0
add address=192.168.88.0/24 interface=ether2 network=192.168.88.0
/ip dns
set allow-remote-requests=yes servers=8.8.8.8
/ip route
add distance=5 gateway=ether1 dst-address=0.0.0.0/0
/ip pool
add name=dhcp ranges=192.168.88.0/24
/ip dhcp-server
add address-pool=dhcp disabled=no interface=ether2 name=default-dhcp
/ip dhcp-server network
add address=192.168.88.0/24 dns-server=192.168.88.1 gateway=192.168.88.1
/ip firewall nat
add action=src-nat chain=srcnat out-interface=ether1 to-addresses=192.168.1.250
/ip firewall mangle
add action=change-mss chain=forward new-mss=clamp-to-pmtu \
passthrough=yes protocol=tcp tcp-flags=syn
add action=change-mss chain=output new-mss=clamp-to-pmtu \
passthrough=yes protocol=tcp tcp-flags=syn
