This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
networking:router:mikrotik_vpn_pptp [2017/07/05 09:14] gcooper |
networking:router:mikrotik_vpn_pptp [2018/06/25 10:45] (current) gcooper |
||
---|---|---|---|
Line 1: | Line 1: | ||
====== Mikrotik PPTP VPN ====== | ====== Mikrotik PPTP VPN ====== | ||
- | FIXME Needs verification and completion | + | See also **[[networking: |
http:// | http:// | ||
Line 11: | Line 11: | ||
===== Enable PPTP Server ===== | ===== Enable PPTP Server ===== | ||
- | {{ : | + | FIXME Needs updating for newer RouterOS, but still works. |
+ | |||
+ | {{ : | ||
**PPP -> Interface -> PPTP Server -> Enable** | **PPP -> Interface -> PPTP Server -> Enable** | ||
Line 20: | Line 22: | ||
* Encrypted | * Encrypted | ||
- | ===== Create | + | ===== Create |
- | + | ||
- | {{ : | + | |
- | + | ||
- | **IP -> Pool -> Add** | + | |
- | + | ||
- | * Name (PPTPpool) | + | |
- | * Range of addresses (192.168.1.10-192.168.1.20) | + | |
- | + | ||
- | **PPP -> Profiles -> Default-Encryption** | + | |
- | + | ||
- | {{ : | + | |
- | + | ||
- | * Local Address (LAN address of router) | + | |
- | * Same for all users | + | |
- | * Remote Address (PPTPpool) | + | |
- | * Pool you created | + | |
- | + | ||
- | **PPP -> PPTP Server -> Secrets** | + | |
- | + | ||
- | * Specify profile (Default-Encryption) | + | |
- | + | ||
- | + | ||
- | ===== Create | + | |
**PPP -> Secrets** | **PPP -> Secrets** | ||
Line 60: | Line 39: | ||
* **Profile** | * **Profile** | ||
* '' | * '' | ||
+ | |||
+ | ===== For Multiple Users ===== | ||
+ | |||
+ | {{ : | ||
+ | |||
+ | **IP -> Pool -> Add** | ||
+ | |||
+ | * Name (PPTPpool) | ||
+ | * Range of addresses (192.168.1.10-192.168.1.20) | ||
+ | |||
+ | **PPP -> Profiles -> Default-Encryption** | ||
+ | |||
+ | * Local Address (LAN address of router) | ||
+ | * Same for all users | ||
+ | * Remote Address (PPTPpool) {{ : | ||
+ | * Pool you created | ||
+ | |||
+ | **PPP -> PPTP Server -> Secrets** | ||
+ | |||
+ | * Specify profile (Default-Encryption) | ||
===== Proxy-ARP ===== | ===== Proxy-ARP ===== | ||
- | :!: Enable Proxy-ARP on the LAN interface for proper | + | :!: Enable Proxy-ARP on the **LAN interface** for proper layer-2 address ARP resolution. |
**Interfaces -> etherN -> General -> ARP -> Proxy-ARP** | **Interfaces -> etherN -> General -> ARP -> Proxy-ARP** | ||
- | :!: If you use a LAN bridge, modify that. | + | :!: If you use a **LAN bridge**, modify that. |
- | **Bridge -> Dbl click LAN Bridge | + | **Bridge -> YourLanBridge |
===== Firewall ===== | ===== Firewall ===== | ||
- | **PPTP** | + | {{ : |
+ | |||
+ | **PPTP** | ||
* TCP port 1723 | * TCP port 1723 | ||
Line 79: | Line 80: | ||
Accept PPTP in Mikrotik: | Accept PPTP in Mikrotik: | ||
- | |||
- | :!: Needs testing for added comment= and place-before= options | ||
< | < | ||
- | /ip firewall filter add chain=input action=accept protocol=tcp dst-port=1723 comment=" | + | /ip firewall filter add chain=input action=accept protocol=tcp dst-port=1723 comment=" |
- | /ip firewall filter add port chain=input action=accept protocol=gre comment=" | + | /ip firewall filter add chain=input action=accept protocol=gre comment=" |
</ | </ | ||
+ | |||
+ | ===== Client Connection ===== | ||
+ | |||
+ | See also **[[networking: | ||
+ | |||
+ | {{ : | ||
+ | |||
+ |