Hi,

We want to use RB951G-2HnD for our employees that are working outsite,
They have a 3G usb adapter.
We want to use that in the RB951G-2HnD so they have internet.

For remote help we want a PPPTP server on these devices.
Is that possible with random WAN IP?

I create a scipt that send me an email with the WAN IP (PPP interface) after 2 minutes when the RB951G-2HnD is started.
SO I know the actual WAN IP.
But now the PPPTP server.

hi,

try this one

http://wiki.mikrotik.com/wiki/Manual:Interface/PPTP

Thanks a lot
But does it allso work if the WAN IP is not fixec on that device?
Every time the device is turned of and on it gets an other IP.

I want PPPTP to the RB951G-2HnD.
So not to the office got from the office to the eployee how is every day at an other place with the RB951G-2HnD

49er
As I understand PPTP listen on all ROS IP. In this case you can connect to the WAN IP.
Maybe WAN IP is changed during the day ? Or maybe provider block TCP/1723 port for PPTP ?

http://wiki.mikrotik.com/wiki/Dynamic_D ... for_dynDNS

Hi,

I have done this:

[admin@MikroTik] interface pptp-server server> set enabled=yes


[admin@RemoteOffice] /ppp secret> add name=Laptop service=pptp password=123
local-address=10.1.101.1 remote-address=10.1.101.100

But don't know what to fill in by local-address and remote-address.

hi share me your chat id or ip address of router on which you need to configure PPtp Server

Hi, do you mean my wan IP address?
Or the addres the Mikrotik has?

yup

WAN IP

The WAN ip is 80.101.110.68

can you start team viwer or Chat soon

what is login & password for RB ( 80.101.110.68 )

Hi,

I create a user for you.
Username: samir
Passord: password

can you start team viwer or Chat soon

what is login & password for RB ( 80.101.110.68 )

When do you have time to look at the connection???

I don't really see why you want the pptp server for this.

If I get you right you have users traveling with laptop and a mikrotik and you want to be able to get onto to lan-side of the box i order to i.e. do rdp to the users computer.
The way I do this is to setup sstp-server on the office router.
On the client router I set sstp-client to dial up to the office router.

Now, on the office router, where you set username and password for the for the dial in you also need to add the client router local subnet as route.

With this setup you'll be able to remoteadmin the client router, and you'll also have direct routing from the office to the client subnet.
If you're not in the office when they need support you can just vpn into the office (and do manual route add on your pc if needed) and you have access to the clients subnet.

(Using pptp would do just as well, but I prefer sstp as it will work even when the client router is behind some firewall that doesn't allow pptp. This will not make you dependent on a 3G with public ip. The user can connect the client router to any network that provides dhcp and allows outbound port 443 (https) connections.)

Hi,

Thanks for your reply and sugestion.
Touse sstp-server in stead of pptp.
I'm not familiar with sstp-server. So if you can tell me more about this and how to setup (that will help me a lot.)

What I want is to be able to help our employees if they are on location somewhere and have questions.
So I can login easely on there network and I'm part of there netwok.
So if they have connected a printer or other device allso to the mikrotik I can manage that device allso from my office.
That is what I want.

You set up sstp exactly like you set up pptp. Only difference (for a basic setup) is that you select sstp every place you would otherwise select pptp. And in the firewall you need to open port 443, not 1723 (unless you select a custom port in the config)

To secure the sstp you should also create a certificate, import it to both routers and set the sstp server/client to use this cert. Self signed cert work for mikrotik-mikrotik. If you want windows vpn to use sstp (config exactly like how you would set up pptp), the cert needs to be official. (Ppl say windows also can use selfsigned certs for sstp, but I haven't been able to make that work.)

Assumed you have an mikrotik somewhere with a static public ip that can act as sstp (or pptp) server, I think this is the best solution for your needs.