Page 1 of 1

Limiting incoming VPN users

Posted: Wed Jul 16, 2014 3:04 am
by rizwan602
Hello,

I have a MikroTik routerboard set up as a PPTP server. I have set up PPTP secret (username and password). The PPTP server is working great and users can remote in from anywhere they have an internet connection.

I want to know if there is a way to limit concurrent logins using a PPTP username and password. I want to make sure that only 1 connection is made. I do not want to have the same PPTP username have more than 1 concurrent login.

How can I make this work?

Thank you for your help.

Rizwan

Re: Limiting incoming VPN users

Posted: Wed Jul 16, 2014 6:05 am
by villageworker
Set the 'only-one' property. See http://wiki.mikrotik.com/wiki/Manual:PPP_AAA

Re: Limiting incoming VPN users

Posted: Thu Jul 17, 2014 1:27 am
by rizwan602
Thank you for that information. I saw the manual and have another question. What does this mean?

"default - derive this value from the interface default profile; same as no if this is the interface default profile"

What interface is this referring to? "interface default profile"

Set the 'only-one' property. See http://wiki.mikrotik.com/wiki/Manual:PPP_AAA

Re: Limiting incoming VPN users

Posted: Thu Jul 17, 2014 2:00 am
by rizwan602
Also, is it possible to set the limit to 3 concurrent connections?
Set the 'only-one' property. See http://wiki.mikrotik.com/wiki/Manual:PPP_AAA

Re: Limiting incoming VPN users

Posted: Thu Jul 17, 2014 8:23 pm
by villageworker

"default - derive this value from the interface default profile; same as no if this is the interface default profile"

What interface is this referring to? "interface default profile"

Set the 'only-one' property. See http://wiki.mikrotik.com/wiki/Manual:PPP_AAA
There are two profiles created - default and default-encryption. So if you use the default profile the value of
property only-one is no

The PPTP connection is considered an interface.

Regarding limiting a user to 3 connections I am not sure. May require some experimentation with IP pools's