User Tools
networking:router:mikrotik_vpn_l2tp
Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
networking:router:mikrotik_vpn_l2tp [2016/05/13 12:41] jcooper |
networking:router:mikrotik_vpn_l2tp [2019/08/14 14:13] (current) gcooper |
||
|---|---|---|---|
| Line 1: | Line 1: | ||
| ====== Mikrotik L2TP VPN ====== | ====== Mikrotik L2TP VPN ====== | ||
| + | |||
| + | **RouterOS v6.44 or above**: https:// | ||
| + | |||
| + | Stats: http:// | ||
| + | |||
| + | New info? http:// | ||
| FIXME Needs verification and completion | FIXME Needs verification and completion | ||
| Line 11: | Line 17: | ||
| * All traffic routes through tunnel | * All traffic routes through tunnel | ||
| - | ===== Enable | + | ===== Enable |
| **PPP -> Interface -> L2TP Server -> Enable** | **PPP -> Interface -> L2TP Server -> Enable** | ||
| - | * MTU 1450 | + | * Max MTU |
| - | * Authentication uncheck chap and pap leave MSCHAPv2 and MSCHAv1 | + | * L2TP has 40-byte overhead |
| - | * Check Use IPsec enter IPsec Secret: | + | * 1450 - Lowering the MTU can speed up VPN - test path MTU first |
| - | + | * 1460 - Default - Good if uplink MTU is 1500 | |
| - | ===== Create Single Users ===== | + | * Default Profile |
| - | + | * Select | |
| - | **PPP -> Secrets** | + | * Authentication |
| - | + | * De-select '' | |
| - | * **Name** | + | * Select '' |
| - | * Username | + | * Select '' |
| - | * **Password** | + | * Enter IPsec Secret needed to configure client |
| - | * **Service** | + | * Click '' |
| - | * '' | + | |
| - | * **Local Address** | + | |
| - | * Same for all users | + | |
| - | * Router's LAN address | + | |
| - | * **Remote Address** | + | |
| - | * Different for each user | + | |
| - | * Outside of DHCP range | + | |
| - | * **Profile** | + | |
| - | * '' | + | |
| ===== Create IP Pool for Multiple Users ===== | ===== Create IP Pool for Multiple Users ===== | ||
| Line 41: | Line 38: | ||
| **IP -> Pool -> Add** | **IP -> Pool -> Add** | ||
| - | * Range of addresses (192.168.1.10-192.168.1.20) | + | |
| + | | ||
| **PPP -> Profiles -> Default-Encryption** | **PPP -> Profiles -> Default-Encryption** | ||
| Line 48: | Line 46: | ||
| * Remote Address (pool you created) | * Remote Address (pool you created) | ||
| - | **PPP -> PPTP Server | + | **PPP -> Interface |
| - | * Specify | + | * Specify Default |
| + | |||
| + | ===== Create Users ===== | ||
| + | |||
| + | **PPP -> Secrets -> Add+** | ||
| + | |||
| + | * **Name** | ||
| + | * Username | ||
| + | * **Password** | ||
| + | * **Service** | ||
| + | * '' | ||
| + | * **Local Address** (leave blank if using IP pool) | ||
| + | * Same for all users | ||
| + | * Router' | ||
| + | * **Remote Address** (leave blank if using IP pool) | ||
| + | * Different for each user | ||
| + | * Outside of DHCP range | ||
| + | * **Profile** | ||
| + | * '' | ||
| ===== Proxy-ARP ===== | ===== Proxy-ARP ===== | ||
| Line 60: | Line 76: | ||
| **Interfaces -> etherN -> General -> ARP -> Proxy-ARP** | **Interfaces -> etherN -> General -> ARP -> Proxy-ARP** | ||
| - | ===== Firewall ===== | ||
| - | **PPTP** uses: | ||
| - | * TCP port 1723 | ||
| - | * GRE (protocol ID 47) for tunneling | ||
| - | Accept PPTP in Mikrotik: | ||
| - | < | + | |
| - | /ip firewall filter add chain=input action=accept protocol=tcp dst-port=1723 | + | |
| - | /ip firewall filter add chain=input action=accept protocol=gre | + | |
| - | </ | + | |
networking/router/mikrotik_vpn_l2tp.1463164869.txt.gz · Last modified: 2016/05/13 12:41 by jcooper
Page Tools
Except where otherwise noted, content on this wiki is licensed under the following license: CC Attribution-Share Alike 4.0 International
