Created
August 2, 2020 15:21
-
-
Save carlesloriente/3ba0d4e9902cd517c76415786fca11cd to your computer and use it in GitHub Desktop.
Mikrotik RouterOs PPTP VPN Full configuration
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# Mikrotik RouterOs PPTP VPN Full configuration | |
# | |
/interface bridge | |
add fast-forward=no name=bridge | |
/interface ethernet | |
set [ find default-name=ether1 ] advertise=10M-half,10M-full,100M-half,100M-full,1000M-half,1000M-full | |
/interface bridge port | |
add bridge=bridge hw=no interface=ether1 | |
/snmp community | |
set [ find default=yes ] addresses=0.0.0.0/0 | |
/system clock | |
set time-zone-name=Europe/Dublin | |
/system identity | |
set name=mikrotik_vpn | |
/system ntp client | |
set enabled=yes server-dns-names=pool.ntp.org | |
/ip service | |
set telnet disabled=yes | |
set ftp disabled=yes | |
set www disabled=yes | |
set api disabled=yes | |
set api-ssl disabled=yes | |
/ip pool | |
add name=pool-vpn ranges=10.1.1.2-10.1.1.250 | |
/ppp profile | |
add bridge=bridge local-address=pool-vpn name=profile-vpn remote-address=pool-vpn | |
add bridge=bridge dns-server=8.8.8.8 local-address=pool-vpn name=pptp_vpn remote-address=pool-vpn | |
/ip dhcp-client | |
add !dhcp-options disabled=no interface=ether1 | |
add disabled=no interface=bridge | |
/ip firewall filter | |
add chain=input dst-port=1194 protocol=tcp | |
/ip firewall nat | |
add action=masquerade chain=srcnat out-interface=bridge src-address=10.1.1.2-10.1.1.250 | |
add chain=srcnat | |
/ppp secret | |
add name=vpn_user password="ChangeThisPasword" profile=profile-vpn service=any |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Full article: https://www.notesoncloudcomputing.com/routeros/mikrotik/vpn/2020/08/01/configure-vpn-server-pptp-mikrotik-routeros/