MikroTik Router VPN Site-to-Site Connectivity With L2TP/IPsec And OpenVPN

If you are looking for a way to ensure secure communication between remote employees or teams, then configuring a VPN on your MikroTik router can be an effective solution. VPN or Virtual Private Network, helps in encrypting network traffic, preventing unauthorized access to information, and ensuring a secure network connection. With that in mind, in this post, we will be discussing how you can configure your MikroTik router for VPN, specifically, the PPTP VPN Server Setup.

What is MikroTik Router?

MikroTik Router is a small yet powerful router that can be used as a standalone router or as an integral part of a large network. It is a highly reliable and versatile router that offers features such as VPN, Firewall, Quality of Service (QoS), and more, making it an ideal choice for businesses of all sizes.

What is PPTP VPN?

PPTP, or Point-to-Point Tunneling Protocol, is a protocol used to create a secure and encrypted connection over a network, providing access to users from remote locations. It is also commonly used for secure communication between two networks over the internet. PPTP VPN can be set up easily on a MikroTik router, making it a popular choice for businesses that require secure communication.

How to Configure PPTP VPN on MikroTik Router:

Here are the steps to configure PPTP VPN on MikroTik Router:

Step 1: Accessing the MikroTik Router

The first step, of course, is to access the router's web interface. To do so, open your web browser and type the default IP address of your MikroTik router in the address bar. The default IP address is usually 192.168.88.1 or 192.168.1.1.

Step 2: Creating a PPTP Server Interface

The next step is to create a PPTP server interface on your MikroTik router. To do so, click on the "Interfaces" tab and then click on the "Add New" button. From the drop-down menu, select "PPTP Server" and then click on the "Apply" button.

Step 3: Configuring the PPTP Server Interface

Next, you need to configure the PPTP server interface that you just created. To do so, click on the New Interface and then select the "PPTP Server" in the dropdown menu. After that, configure the following settings:

Name – Enter a name for the PPTP Server Interface.
MTU – The default MTU is set to 1460. You can change it if necessary.
Max MTU – The maximum MTU size allowed on your network.
MRRU – The default value is 1460. You can change it if necessary.
Max MRRU – The maximum MRRU size allowed on your network.
Authentication – Set it to "mschap2".
Use Encryption – Check the box next to "Use Encryption".
Address – Enter the IP address range for the PPTP client connections. (For example, if you want to give IP addresses in the range of 10.0.0.1-10.0.0.254 to the PPTP Clients).

After configuring the PPTP server interface, click on the "Apply" button.

Step 4: Adding a User to the Router

The next step is to add a user to the router. To do so, click on the "PPP" tab and then click on the "Secrets" sub-tab. From there, click on the "Add New" button, and enter the following details:

Name – Enter the username for the user.
Password – Enter the password for the user.
Service – Select the "pptp" option from the drop-down menu.
Profile – Select "default" from the drop-down menu.

After adding the user, click on the "Apply" button.

Step 5: Configuring Firewall Rules

The next step is to configure firewall rules. To do so, click on the "IP" tab and then on the "Firewall" sub-tab. From there, click on the "Add New" button, and enter the following details:

Read also

Chain – Set it to "input".
Protocol – Select the "tcp" option from the drop-down menu.
Dst. Port – Enter "1723" in the Dst. Port field.
Action – Select the "accept" option from the drop-down menu.

After configuring the firewall rules, click on the "Apply" button.

Step 6: Connecting to the PPTP VPN Server

The final step is to connect to the PPTP VPN server. To do so, use a PPTP client software that supports MSCHAPv2 authentication. The credentials that you need to enter are the username and password that you had created earlier.

Windows – Click on the network icon in the taskbar and select "VPN Connection" from the menu.
MacOS – Click on the Apple icon in the menu bar and select "System Preferences". From there, click on the "Network" icon and select the "+" button. From the drop-down menu, select the "VPN" option and configure the settings.
Linux – Use the "pptp-linux" package to configure the PPTP VPN connection.

That's it! You should now be able to establish a secure and encrypted connection between your remote clients and your MikroTik router.

Conclusion

Configuring a PPTP VPN server on your MikroTik router can be a great way to ensure secure communication between remote employees or teams. The process is relatively easy and can be done with a few simple steps. With the above guide, you should be able to set up a PPTP VPN server on your MikroTik router without any hassle.

Just remember to follow the steps carefully, and configure the settings correctly to ensure that the VPN connection is secure and effective. Good luck!