PPTP VPN Different subnet groups per User

RouterOS General
1

I would like to run up a PPTP VPN and have a number of users - depending on the user depends on the acces they have, i.e.:

Mikrotik LAN_A = 192.168.10/24
Mikrotik LAN_B = 192.168.20/24

I’m thinking to setup two IP Pools, and then implement firewall rules source/destination to filter packets:

Restricted_Users = 172.25.10.2-172.25.10.200
Normal_Users = 172.25.20.2-172.25.20.200

I have user_a, user_b, user_c and so on… is there any way for the PPTP server to assign an address from either of the two VPN IP pools depending on the user?

i.e. user_a and user_b get an address from Restricted_Users, user_d and user_z get an address from Normal_Users?

Also, the PPTP server is set to a Default Authentication profile, then a user PPP Secret also have a profile set:

What is the different between these two profile fields?

What happens if there is mismatch between the user profile field and the PPTP server default profile field?

2

Create 2 pools, create 2 ppp profiles and specify a different profile for each secret based on what access level you’d like them to have.

If there’s a conflict between the default profile and the one a user is assigned, the one assigned to that user takes precedence.