I am new on the Mikrotik platform. I tried to configure an RB2011 device, but i have problems to make work PPTP VPN server. Everythink just working fine, but not PPTP server.
When i try to connect, i see the following log entries (i changed my public IP to m.m.m.m):
11:07:07 pptp,info TCP connection established from m.m.m.m
11:07:07 pptp,ppp,info,account administrator logged in, 192.168.16.230
11:07:07 pptp,ppp,info <pptp-administrator>: authenticated
11:07:07 pptp,ppp,info <pptp-administrator>: terminating...
11:07:07 pptp,ppp,info,account administrator logged out, 0 18 28 3 4
11:07:07 pptp,ppp,info <pptp-administrator>: disconnected
11:07:11 pptp,info TCP connection established from m.m.m.m
11:07:11 pptp,ppp,info,account administrator logged in, 192.168.16.230
11:07:11 pptp,ppp,info <pptp-administrator>: authenticated
11:07:11 pptp,ppp,info <pptp-administrator>: terminating... - disconnected
11:07:11 pptp,ppp,info,account administrator logged out, 0 18 28 3 4
11:07:11 pptp,ppp,info <pptp-administrator>: disconnected
11:07:15 pptp,info TCP connection established from m.m.m.m
11:07:15 pptp,ppp,info,account administrator logged in, 192.168.16.230
11:07:15 pptp,ppp,info <pptp-administrator>: authenticated
11:07:15 pptp,ppp,info <pptp-administrator>: terminating...
11:07:15 pptp,ppp,info,account administrator logged out, 0 18 28 3 4
11:07:15 pptp,ppp,info <pptp-administrator>: disconnected
Can you help me, where the problem is?
My current config:
Code: Select all
# mar/25/2016 12:31:16 by RouterOS 6.34.3
# software id = 8VNN-Y7PQ
#
/interface bridge
add name="LAN bridge"
/interface ethernet
set [ find default-name=ether1 ] name="ether1 - WAN"
set [ find default-name=ether2 ] name="ether2 - LAN"
set [ find default-name=ether3 ] master-port="ether2 - LAN" name=\
"ether3 - Wifi"
set [ find default-name=ether4 ] master-port="ether2 - LAN"
set [ find default-name=ether5 ] master-port="ether2 - LAN"
set [ find default-name=ether7 ] master-port=ether6
set [ find default-name=ether8 ] master-port=ether6
set [ find default-name=ether9 ] master-port=ether6
set [ find default-name=ether10 ] master-port=ether6
set [ find default-name=sfp1 ] master-port="ether2 - LAN"
/interface pppoe-client
add add-default-route=yes disabled=no interface="ether1 - WAN" \
keepalive-timeout=disabled name="Tcom internet" password=password user=\
user@provider
/interface vlan
add interface="LAN bridge" name="Guest VLAN" vlan-id=2
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec proposal
set [ find default=yes ] enc-algorithms=aes-128-cbc
/ip pool
add name="Guest pool" ranges=192.168.2.100-192.168.2.254
add name=PPTP_VPN_Pool ranges=192.168.16.220-192.168.16.240
/ppp profile
add dns-server=192.168.16.5 local-address=192.168.16.1 name=PPTP_VPN_profile \
remote-address=PPTP_VPN_Pool
/interface bridge port
add bridge="LAN bridge" interface="ether2 - LAN"
add bridge="LAN bridge" interface=ether6
add bridge="LAN bridge" interface="Guest VLAN"
/interface pptp-server server
set default-profile=PPTP_VPN_profile enabled=yes
/ip address
add address=192.168.16.1/24 interface="LAN bridge" network=192.168.16.0
add address=192.168.2.1/24 interface="Guest VLAN" network=192.168.2.0
/ip dhcp-client
add dhcp-options=hostname,clientid disabled=no interface="ether1 - WAN"
/ip dhcp-server network
add address=192.168.2.0/24 dns-server=84.2.44.1,84.2.46.1 gateway=192.168.2.1
/ip dns
set servers=8.8.8.8
/ip firewall address-list
add address=n.n.n.n list=itmgmt
add address=n.n.n.n/n list=itmgmt
add address=n.n.n.n list=itmgmt
add address=n.n.n.n list=itmgmt
/ip firewall filter
add chain=input comment="PPTP VPN GRE" protocol=gre
add chain=input comment="PPTP VPN" dst-port=1723 protocol=tcp
add chain=forward
add chain=input comment="itmgmt network incoming" in-interface=\
"Tcom internet" src-address-list=itmgmt
add chain=forward comment="levelez\E9s tilt\E1s" dst-port=25 in-interface=\
"LAN bridge" protocol=tcp src-address=192.168.16.5
add chain=forward dst-address=84.2.46.3 dst-port=25 in-interface="LAN bridge" \
protocol=tcp
add action=drop chain=forward comment="levelez\E9s tilt\E1s" dst-port=25 \
in-interface="LAN bridge" protocol=tcp src-address=192.168.0.0/16
add chain=input comment="felepult kapcsolatok beengedese" connection-state=\
established,related
add action=drop chain=input comment=\
"kivulrol kezdemenyezett kapcsolatok blokkolasa" in-interface=\
"Tcom internet"
/ip firewall nat
add action=masquerade chain=srcnat out-interface="Tcom internet" src-address=\
192.168.16.0/24
add action=masquerade chain=srcnat out-interface="Tcom internet" src-address=\
192.168.2.0/24
add action=dst-nat chain=dstnat comment="RDP Nat" dst-port=3389 in-interface=\
"Tcom internet" protocol=tcp src-address-list=itmgmt to-addresses=\
192.168.16.5 to-ports=3389
/ppp aaa
set use-radius=yes
/radius
add address=192.168.16.5 secret=secret service=ppp
/system clock
set time-zone-name=Europe/Budapest
/system identity
set name=somerou
/system ntp client
set enabled=yes primary-ntp=148.6.0.1
Peter
