VPN & PPPOE Questions

RouterOS Beginner Basics
1

Hi Guys,

I am new to Mikrotik and I want to start dabbling in VPN’s etc.

I have a few questions on the VPN.

I have a RB750, my question is on the VPN side, do I need a RB on both sides to create a VPN or only a RB on the server side?

I have a basic idea of how to setup the VPN, but I am unsure of the IP adresses to use,
This is what I think it should be, so please correct me if I am wrong, which I think I am.

PPPOE setup on server side, adsl router set to bridge mode, DHCP disabled.
NAT rule has been setup for the IP Range.

VPN,
I have not done this yet, but here is what I think it should be.
Interface/PPTP Server
Secrets/add new user/service: pptp
Now what I am unsure of is which address should I use as the Local address and the Remote Address?
Then setup a VPN Connection on the remote PC which dails the IP address, (which I dont know what it should be) withg the username and password as setup under the secrets tab.

If there anything that I am missing? as I said I am very new to this!

I want to use this in a shop I own that has a remote site which needs to VPN in to a server with RDP, dyndns has been setup for a while but I want to install something solid!

Thanks and please excuse all the newbie questions, but I am eager to learn this!!

Thanks

2

You don’t have to have a routerboard on each side, but for site-to-site connectivity it would be better if you did. You can setup PPTP between the two and use IPSec for security or just route the information over the PPTP.

Enable your PPTP server on your main router.

/interface pptp-server server set enabled=yes

Create a user on your main router.

/ppp secret add name=other-location password=some-password profile=default-encryption service=pptp local-address=10.255.1.1 remote-address=10.255.1.2 disable=no

Add a PPTP-Client on your remote router. Replace 1.1.1.1 with the IP of your main router.

/interface pptp-client add connect-to=1.1.1.1 user=other-location password=some-password profile=default-encryption disabled=no

Route from your main router to your remote router.

/ip route add dst-address=192.168.1.0/24 gateway=10.255.1.2 disabled=no

Route from your remote router to your main router.

/ip route add dst-address=192.168.2.0/24 gateway=10.255.1.1 disabled=no

Replace the dst-address in the routes with your networks and depending on your firewall add a firewall rule to accept the remote networks.