VPN Configuration with MikroTik Router
VPN (Virtual Private Network) is a technology that extends private network across a public network. It enables networks users to send and receive data across public network as if their network devices were directly connected to the private network.
MikroTik Router provides a lot of VPN services. Among them today I ‘ll show how to configure a client-server vpn with MikroTik PPTP service. With client-server vpn a user can access server, printer, IP phone and any other network devices of any private network across public network. For example, if you are a system administrator or an employee of an office and you need to access your office server, printer or any network devices while you are outside of your office, a client-server vpn will be better solution for you.
So, to configure a client-server vpn in MikroTik router this article will cover the below topology…
Here, a user is connected to his/her office by creating PPTP tunnel across public network and he/she is accessing office network devices through this PPTP tunnel. This article will show how to configure such a client-server vpn network where a user will be connected to his/her office for accessing network devices while he/she is outside of his/her office.
Required Information those are using here
- MikroTik WAN Network: 172.22.15.221/24 (Must replace with your Public IP provided by ISP)
- MikroTik LAN Network: 192.168.20.1/24
- Local Address: 192.168.20.1 (MikroTik LAN Interface IP)
- Remote Address: 192.168.20.50 (IP address that remote user will get)
MikroTik Router basic configuration was discussed in my previous article. If you are new here, please spend some time to learn how to do MikroTik Router basic configuration using Winbox from very beginning. Then do the below steps to configure a client-server VPN network with MikroTik PPTP service.
PPTP server configuration steps:
- PPTP interface creation
- PPTP server enable
- Secrets (Username and Password) creation
- Enable proxy-arp to WAN interface.
PPTP Interface Creation
To create a client-server VPN with PPTP service, first you have to create a pptp interface. For this do the below steps:
- Go to PPP > Interface and click on add drop-down menu and then choose PPTP Server option.
- Put PPTP interface name in Name field and click on Apply and then OK button.
Enable PPTP Server
Now we will enable PPTP server in MikroTik Router. For this, do the below steps:
- Go to PPP menu item and click on PPTP Server button.
- Now click on enabled checkbox and then click Apply and OK button.
- Alternatively, you can do this cmd: > interface pptp-server server> set enabled=yes
- And to show pptp-server status: > interface pptp-server server> print
Secrets Creation (Username and Password)
Now it is time to create a user who will be connected to pptp server. For this do the below steps:
- Go to PPP > Secrets and click on add new button (+).
- Now put username and password to Name and Password input field. Choose Service=pptp, Profile=default, Local Address= 192.168.20.1 (Router interface IP), Remote Address= 192.168.20.50 (Local IP address that user will get).
- Click Apply and OK button.
- Alternatively, you can do this cmd: > ppp secret> add name=username service=pptp password=123 local-address=192.168.20.1 remote-address=192.168.20.50
- To show secrets from cmd: > ppp secret> print
You can add as many users who will be connected to your pptp server as you need by the above steps.
Enable proxy-arp to WAN interface
Lastly, you have to enable proxy-arp to WAN interface for identifying your remote user in arp list. For this do the below steps:
- Click on Interface menu and double click on your WAN interface and choose ARP to proxy-arp.
- Alternatively, you can do this cmd: > interface ethernet> set ether1 arp=proxy-arp
- And to show Ethernet status: > interface ethernet> print
Your client-server vpn with MikroTik PPTP service is now ready if you do the above steps properly. Your vpn user are now able to login to your vpn server with the username and password provided by you. Create a VPN adapter in your favorite Operating System and login with the username and password. If you have any confusion to do above steps properly, please watch the below video carefully about VPN configuration with MikroTik Router for more details.
Client-server VPN configuration with MikroTik has been discussed in this article. If you face any problem to configure such a network, feel free to contact with me from my Contact page. I’ll try my best to stay with you.