MikroTik CHR: How to set-up PPTP VPN Server

Quick guide to configure Mikrotik CHR as PPTP VPN Server.

Both Command Line Interface and WinBox way:

1. Add Pool of IP-Addresses to be used with this service

[[email protected]] > ip pool add name=PPTP-Pool ranges=192.168.99.10-192.168.99.200

2. Create "Profile"

[[email protected]] > ppp profile add change-tcp-mss=yes local-address=PPTP-Pool name=PPTP-Profile only-one=yes remote-address=PPTP-Pool use-encryption=yes dns-server=8.8.8.8,8.8.4.4

3. Create "Secrets" for users/computers that will access the VPN.

[[email protected]] > ppp secret add name=user1 [email protected] profile=PPTP-Profile

4. Enable PPTP Server

[[email protected]] > interface pptp-server server set authentication=chap,mschap1,mschap2 default-profile=PPTP-Profile enabled=yes

5. Accept incoming connections in the firewall:

[[email protected]] > ip firewall filter add chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp

Optional settings:

6. Setup binding interface based on username of the "caller"

With this You will be able to set the binding interface in firewall rules if needed and apply specific policies on the interface/user

[[email protected]] > interface pptp-server add name=pptp-user1 user=user1

Now Your MikroTik Router is ready to serve PPTP VPN Connections!

More details about PPTP in MikroTik's RouterOS Here.

Purchase the most appropriate MikroTik CHR VPS plan for your project & take advantage of up to 30% off.

Get Started!

Also Read

MikroTik CHR: How to set-up The Dude Monitoring

This article will help You deploy cloud-based network and infrastructure monitoring tool: The...

MikroTik CHR: Getting the License

After the initial setup, a CHR instance will have a free license assigned. From there, it is...

MikroTik CHR Licensed - Applying the included license

This article is only about "MikroTik Cloud Hosted Router - Licensed" package. In order to use...

MikroTik CHR: Basic system protection

Guide for essential system protection. First to consider! If You leave service ports standard...