Need a VPN server to test with

RouterOS General
1

Does anybody know of or have a public test server for VPNs? I’m looking for a server set up somewhere that would just accept your connection and essentially let you know, “Terrific, looks like your VPN client is working properly, have a nice day.”

Back in the old days, there were a number of servers that would accept modem calls and tell you that your modem was working OK, what speed and settings it had, and so on, and then hang up on you. That’s pretty much all I want.

I’m trying to set up a VPN server on my Mikrotik. I followed all the instructions in the wiki, and it works from some locations but not from others. Either something is wrong with it or something is wrong with my home SOHO router, yet it’s a model that has a good reputation for working well with VPNs.

I’d like to just try accessing a standard, known-good server so I can figure out where the problem is likely to be. It would be nice to have both PPTP and L2TP variants available to test, in case my home router is fumbling only one of them. I thought I’d ask here in case somebody might have a testbed MikroTik set up for a VPN that he wouldn’t mind me making a couple of short test logins into.

2

Why don’t you post your configuration and we can see if there are any problems that stick out?

3

Fine. I think these are all the relevant portions, with perhaps a few irrelevant ones.

# jul/04/2008 18:16:41 by RouterOS 3.10
#
/interface bridge
add admin-mac=00:00:00:00:00:00 ageing-time=5m arp=proxy-arp auto-mac=yes \
    comment="" disabled=no forward-delay=15s max-message-age=20s mtu=1500 \
    name=vpn priority=0x8000 protocol-mode=none transmit-hold-count=6

/interface wireless

set 1 ... name=Ranch ... ssid=Ranch station-bridge-clone-mac=00:00:00:00:00:00 ...
    wds-default-bridge=none wds-default-cost=100 wds-ignore-ssid=no wds-mode=dynamic \
    wmm-support=disabled

/ip ipsec proposal
set default auth-algorithms=sha1 disabled=no enc-algorithms=3des lifetime=30m \
    name=default pfs-group=modp1024
/ip pool
add name=Ranch ranges=192.168.2.10-192.168.2.100
add name=pptp ranges=192.168.2.5-192.168.2.9
/ip dhcp-server
add address-pool=Ranch authoritative=after-2sec-delay bootp-support=static \
    disabled=no interface=Ranch lease-time=3d name=Ranch

/ppp profile
set default change-tcp-mss=yes comment="" name=default only-one=default \
    use-compression=default use-encryption=default use-vj-compression=default
add change-tcp-mss=yes comment="" dns-server=192.168.2.1 local-address=\
    192.168.2.1 name=pptp-in only-one=yes remote-address=pptp \
    use-compression=default use-encryption=required use-vj-compression=\
    default
set default-encryption change-tcp-mss=yes comment="" name=default-encryption \
    only-one=default use-compression=default use-encryption=yes \
    use-vj-compression=default

/user
add address=0.0.0.0/0 comment="" disabled=no group=read name=[redacted]

/interface bridge port
add bridge=vpn comment="" disabled=no edge=auto external-fdb=auto horizon=\
    none interface=Ranch path-cost=10 point-to-point=auto priority=0x80
/interface bridge settings
set use-ip-firewall=no use-ip-firewall-for-vlan=no

/interface pptp-server server
set authentication=chap,mschap1,mschap2 default-profile=pptp-in enabled=yes \
    keepalive-timeout=30 max-mru=1460 max-mtu=1460 mrru=disabled

/ip address

add address=192.168.2.1/24 broadcast=192.168.2.255 comment="" disabled=no \
    interface=vpn network=192.168.2.0

/ip dhcp-server network
add address=192.168.2.0/24 comment="" dns-server=68.2.16.30,4.2.2.1 gateway=\
    192.168.2.1

/ip firewall service-port

set pptp disabled=no

/ppp profile
set default change-tcp-mss=yes comment="" name=default only-one=default \
    use-compression=default use-encryption=default use-vj-compression=default
add change-tcp-mss=yes comment="" dns-server=192.168.2.1 local-address=\
    192.168.2.1 name=pptp-in only-one=yes remote-address=pptp \
    use-compression=default use-encryption=required use-vj-compression=\
    default
set default-encryption change-tcp-mss=yes comment="" name=default-encryption \
    only-one=default use-compression=default use-encryption=yes \
    use-vj-compression=default

/ppp secret
add caller-id="" comment="" disabled=no limit-bytes-in=0 limit-bytes-out=0 \
    name=[redacted] password=[redacted] profile=pptp-in routes="" \
    service=pptp