How to configure PPTP VPN for your remote Mikrotik sites. Mikrotik VPN configuration

hello guys so today i want us to take a look at how you can be able to set up vpn so i want us to look at a pptp vpn the setup this is a really important when you have multiple sites because definitely when you have multiple remote sites these are sites that you need to be accessible they need to be reachable at any time and you are also you should also be able to access them or reach them from whatever network you are in you do not just have to be limited to reaching them when you're in your network so basically what you we have here you can see i have two [Music] microtic routers opened so this is going to act as our core microtech where we are going to set up the pptp vpn set up the secrets so that those same secrets those credentials we can deploy them to these other microtic so this is going actually to act as a remote site so it's a pretty simple process to do so the first thing that we'll need to do is uh come and create a pool of ips this is a pull of a piece where our clients the remote sites will now be assigned ips from this particular pool so we come to ip pool we add an ipool we are going to name these probably as a pptp pool and we are going to assign a range of ips here 172 dot let's say 10.20.2 to 172.10.20.254 [Music] apply okay so basically this is the range that the remote sites are going to be given when they connect as a pppoe but not pptp client sorry about that so after that we need to not these ip pool so we come to ip firewall let me just expand this node plus this is going to be masquerade and our source node address is going to be 172.10.20.0024. [Music] okay apply okay [Music] so the next thing that you need to do you now need to come to ppp then you need to come to the profile section then you now need to create a profile so we are going to name this uh pptp profile and the local address is going to let's get the local address from the pptp pool the remote address is also going to let's get it from the pptp pool as well and that's it apply okay so the next thing that we'll need to do we'll need to now create some few other firewall rules that will enable pptp to to go through so we need to come to ip firewall and now this time we are going to go to filter rules we are now going to add some few filter rules for the pptp to actually work so we come to add and the chain here is going to be input chain and the protocol we are going to use a protocol this is supposed to be gre and your in interface should be your one or for my case it's going to be my ether one apply okay so that is the first filter rule we have one more filter rule to add so we are going to say add the chain is still going to be an input chain and then after that we are going to use tcp protocol yeah that's it and then we are going to add a port number here this is a the port number that is used by pptp that is a 17 23 and your interface here is either going to be your one or your ether one for my case apply okay so with those two rules the pptp is supposed to work for you then now the next step that we go to we now need to go to the secrets so that we can be able to add the users who are going to be authenticating or connecting to to this uh pptp service so we are going to add what name do we give it we can give it let's say new user we are going to say the password could be one two three four five and it's important that you choose the service here we are working with pptp so we are choosing the service to be pptp and the profile it's going to be the profile that we generate that we created this is going to be pptp profile okay you apply that and i don't i need to not forget this because it's going to be usable somewhere okay so once that is set we are now done oh sorry we need to first of all come to the interface section then we need to set up pptp server so we are going to enable this we are going to let everything else remain as it is no the the default profile we we need to choose the pptp profile yeah then you apply that okay so basically that is all that you need to do from your main site and now let's go to our remote site so that we give it these particular secrets and see if we can get a connection so we are done with that so we need to come to this let's enlarge on that oops we are having a bit of a problem just let me fix that new inbox yep this is the guy that i want i think i have no password here let's connect okay let's imagine that so let's do our with these we do away with this so what we now need to do now remember now this is a this is now our second second router and this is now the remote the remote sites that we we now want to configure so all you need to do is now set up pptp client on this so to set up pptp client all you need to do is you come to interface this drop down here then scroll to where it says pptp client so maybe we can give it a name or we can just let it be pptp out one then the dial out so our dial out is going to be the ip the one ip of our of the first micro tick that we had which is this let's try and pull it so let's see ip addresses here it is so we're just going to copy this so it's going to connect to to that here and our user i think we said it's new user and our password is one two three four five so every other thing is supposed to remain as it is so let's apply this and see if we get connected yes there we are you see we are now connected the status is connected and you can see the iep that we've been assigned here so when we come to this other to our other router and we come to active connections you should be able to see us here so user1 that's an active connection you can see the caller id where i'm calling where the router is calling from and this is the ip that has been assigned so this router can now be accessible remotely using this ip so we can also do the same setup for our for our laptop computer if that's what you also want to use so all you need to do is come to your network settings click on open networks and internet settings then you need to come to vpn so that you can set up a new vpn connection then you say add a vpn connection so our vpn provider definitely is the windows inbuilt connection and our service name is you remember we had this somewhere pp tp out one and uh our address is the ip that we copied this is 172 16 20 to 255 you remember where we got this from right this is from uh the first router the itawana ip then our vpn type you're going to choose a pptp you're going to leave this as a username and password and then our username here we used let's say new user and our password is one two three four five so when you save this it's supposed to connect so let's test it out so it's saved we now need to come to that and say connect yep it's connected you can just see it's already popped up here here it is and it's been assigned 20.5 actually now these are the ips that were signed from the poll that we created and once you do it on your computer you should also be able now to have internet access because if you remember we knotted this range of ip we actually not at the whole range so we can actually also come to our command prompt here yep open that then ping and see if we have internet connection yeah we're good then we can also do an ip config to see what ip that we've been assigned yeah here it is you see this 172.10.20.5 and when you come here here we are so guys that's how you can be able to set up vpn and the same way pptp works is the same way sstp will also work so it's basically set up the same way and that's how you can be able to reach your routers so guys make sure to leave a like subscribe to my channel guys so that we can build up this community we are going to be doing a lot of microtech and ubiquiti network setups and also if you'd also want to have a bandwidth management system i'd explained it in one of my first videos it's a really nice piece of software it's called exit net and it's a software that you can use to build and manage your clients so thanks guys make sure to leave a comment and subscribe see you in the next video thank you

Channel: Mr. WISP_254

Views: 155

Keywords: mikrotik, ubiquiti, ubnt, pppoe, hotspot, wisp, bandwidth management, xceednet, network, wifi, mr.wisp254, Mr. WISP_254, brian onuko, onuko, oktiq, internet, vlan, unms, unifi, unifi controller, static ip, ip, mikrotik configuration, ubiquiti configuration, wisp africa, haplite, winbox, mikrotik for beginners, ubiquiti for beginners, tenda, tp link, tplink, router configuration, router, dashboard, dhcp

Id: 1o-5o2ry4mQ

Length: 14min 45sec (885 seconds)

Published: Tue Sep 28 2021