Here are step by step to setup PPTP Client on Mikrotik. First, create a new PPTP interface by click PPP menu, then add PPTP Client. Please make sure to enter the following data in the fields:
On General Tab :
If you have set all IPs in your network manually, you can skip this step :
On General Tab :
- Name: Anything you want, but if creating multiple connections it makes sense to name them like "pptp-out1"
- Max MTU + Max MRU: Set to 1400
- Connect To: IP or Host your VPN / PPTP server
- User: Your VPN account username
- Password: Your PPTP password.
- Check "Dial On Demand" to ensure that the connection is being dialed when needed but disconnected.
- Check "Add Default Route" to ensure correct traffic routing.
- Allow: Leave all authentication methods checked, as it should be by default already.
- Leave the "Enabled" checkbox unchecked, we still have to do some things.
- Click on "OK".
- In "Chain", select "srcnat", and check the "Enabled" checkbox.
- In "Out. Interface", select the name of the PPTP VPN connection you just created and check its checkbox.
- In "Action", select "Masquerade".
- Click "OK".
- In "Chain", select "prerouting".
- In "Src. Adress", enter the IP range you want to have routed through the VPN connection. To route all IPs in the Mikrotik routers subnet (assuming the router is 192.168.88.1), enter "192.168.88.2-192.168.88.254". Check the checkbox next to this field.
- In "Action", select "mark routing".
- In "New Routing Mark", here enter any name for the routing mark, e.g. "pptp-conn"
- Click "OK".
- Dst. Address: has to be "0.0.0.0/0".
- Gateway: Here enter the name of the VPN connection you created. (e.g. "pptp-out1")
- Routing Mark: select the routing mark you created before. (e.g. "pptp-conn")
- Click "OK".
- Select "Static" and now "Settings"
- Check "Enabled"
- In the "Servers" fields, enter OpenDNS servers,"8.8.8.8" into one field, and "8.8.4.4" into another.
- Check "Allow Remote Requests".
- Click "OK".
If you have set all IPs in your network manually, you can skip this step :
- Go to "IP" and "DHCP Client".
- Doubleclick your dhcp entry and then uncheck "Use Peer DNS".
- Now click "OK."
Comments