MikroTik CHR: How to set-up PPTP VPN Server (+ video)

A quick guide to configure Mikrotik CHR as PPTP VPN Server.

Here's a small video explaining the process:


For L2TP VPN Server - check the end of this article! 

Both Command Line Interface and WinBox way:

1. Add Pool of IP-Addresses to be used with this service

[[email protected]] > ip pool add name=PPTP-Pool ranges=192.168.99.10-192.168.99.200

Mikrotik RouterOS - IP Pool

2. Create "Profile"

[[email protected]] > ppp profile add change-tcp-mss=yes local-address=PPTP-Pool name=PPTP-Profile only-one=yes remote-address=PPTP-Pool use-encryption=yes dns-server=8.8.8.8,8.8.4.4

RouterOS - New PPP Profile General Tab Mikrotik New PPP Profile Protocols Tab

New PPP Profile - Limits Tab Mikrotik RouterOS New PPP Profile Limits Tab

PPP - Profile Tab

3. Create "Secrets" for users/computers that will access the VPN.

[[email protected]] > ppp secret add name=user1 [email protected] profile=PPTP-Profile

RouterOS - New PPP Secret window

4. Enable PPTP Server

[[email protected]] > interface pptp-server server set authentication=chap,mschap1,mschap2 default-profile=PPTP-Profile enabled=yes

RouterOS - PPTP Server Window

5. Accept incoming connections in the firewall:

[[email protected]] > ip firewall filter add chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp

Mikrotik Firewall Rule General Tab

Firewall Rule Action Tab

6. Enabling NAT in firewall for internet access:

[[email protected]] > ip firewall nat add chain=srcnat out-interface=ether1 action=masquerade

Mikrotik Firewall - Going to nat

RouterOS - Nat config tab generalRouterOS - NAT config tab action

NAT end result - RouterOS

Optional settings:

7. Setup binding interface based on username of the "caller"

With this You will be able to set the binding interface in firewall rules if needed and apply specific policies on the interface/user

[[email protected]] > interface pptp-server add name=pptp-user1 user=user1

Interface List add PPTP Server Binding

New Interface - General tab

RouterOS - Interface List

Now Your MikroTik Router is ready to serve PPTP VPN Connections!

If you want to learn How to set-up L2TP VPN Server. VPN server for Apple devices - Iphone, MacBook. Please follow this link:

https://www.bgocloud.com/knowledgebase/63/mikrotik-chr-how-to-setup-l2tp-vpn-server-vpn-server-for-apple-devices-iphone-macbook-video.html

More details about PPTP in MikroTik's RouterOS Here.

Take a look at our powerful MikroTik VPS servers and choose a suitable plan to get started.

Benefit from the power of MikroTik CHR VPS without purchasing a license. Choose our ‘’Licensed’’ plan and save money.

Get Started!

Also Read

MikroTik CHR Licensing

The CHR has 4 license levels: free p1 perpetual-1($45) p10 perpetual-10($95) p-unlimited...

MikroTik CHR: Getting the License

After the initial setup, a CHR instance will have a free license assigned. From there, it is...

MikroTik CHR: Setup Secure VPN access between client and server

  This guide will describe one of the many possible usages of MikroTik CHR and Virtual Private...

MikroTik CHR: First Run and Default Password

As every other MikroTik RouterOS based system, the Cloud Hosted Router comes up with default...