I want to distribute all of PPTP Clients.
I have C Class Public IP Block from isp xxx.xxx.xxx.2~xxx.xxx.xxx.254 and Gateway = xxx.xxx.xxx.1
I assign ether1 ip=xxx.xxx.xxx.2(also using for pptp server ip)
So this server only accept 251 PPTP Cliens limited by IP-pool.
I plan to using RB-450B for this service. each 1 RB-450B handle 252 clients.
My configuration as below.
/interface ethernet
set 0 arp=enabled name=ether1
/interface bridge
add name=lan arp=proxy-arp disabled=no
/interface bridge port
add bridge=lan disabled=no interface=ether1
/ip address
add interface=ether1 address=xxx.xxx.xxx.2/24 add-default-route=yes
add interface=lan address=xxx.xxx.xxx.3/24
/ip pool
add name=pptp ranges=xxx.xxx.xxx.4-xxx.xxx.xxx.254
/ppp profile
add local-address=xxx.xxx.xxx.3 dns-server=xxx.xxx.xxx.3 name=PIP-PPTP
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=PIP-PPTP enabled=yes
/ip dns
set allow-remote-requests=yes primary-dns="ISP DNS1 IP" secondary-dns="ISP DNS2 IP"
/ip firewall nat
add action=masquerade chain=srcnat comment="" disabled=no src-address=xxx.xxx.xxx.4-xxx.xxx.xxx.254
/ip firewall service-port
set pptp disabled=no
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=xxx.xxx.xxx.3,ether1
/ip neighbor discovery
set ether1 discover=no
set lan discover=no
Actually it is working well,
when each pptp client access to server, they get 1 public ip and every service working as normal public ip user.
Question.
If i want seperate pptp server interface and out going interface what i need to do?
this is what i guess.. please fix error from my config.
/interface ethernet
set 0 arp=enabled name=ether1
/interface bridge
add name=lan arp=proxy-arp disabled=no
/interface bridge port
add bridge=lan disabled=no interface=ether1
/ip address
add interface=ether1 address=xxx.xxx.xxx.2/24 add-default-route=yes
add interface=ether2 address=xxx.xxx.xxx.3/24 add-default-route=yes
add interface=lan address=xxx.xxx.xxx.4/24
/ip pool
add name=pptp ranges=xxx.xxx.xxx.5-xxx.xxx.xxx.254
/ppp profile
add local-address=xxx.xxx.xxx.4 dns-server=xxx.xxx.xxx.4 name=PIP-PPTP
/interface pptp-server server
set authentication=mschap1,mschap2 default-profile=PIP-PPTP enabled=yes
/ip dns
set allow-remote-requests=yes primary-dns="ISP DNS1 IP" secondary-dns="ISP DNS2 IP"
/ip firewall nat
add action=masquerade chain=srcnat comment="" disabled=no src-address=xxx.xxx.xxx.5-xxx.xxx.xxx.254
/ip firewall service-port
set pptp disabled=no
/ip route
add comment="" disabled=no distance=1 dst-address=0.0.0.0/0 gateway=xxx.xxx.xxx.3,ether2
/ip neighbor discovery
set ether1 discover=no
set lan discover=no
thanks
jin