VPN PPTP

RouterOS Beginner Basics
1

Hello.
I would like to set up a VPN.
I found a video tutorial: https://www.youtube.com/watch?v=8SvfARW469E

PPP → Interface → PPTP Server → Enabled → OK
IP → Pool → + → PPTP_Pool, 192.168.2.10-192.168.2.100 → OK
IP → Firewall → NAT → Chain: srnat, Srcadress: 192.168.2.0/24 → Action → Action: masquerade
PPP → Profiles → PPTP Profile, Local address: 192.168.0.85, Remote Address: PPTP_Pool → OK
PPP → Secret → + → Name: VPNName, Password: VPNPassword, service: pptp, Profile: PPTP_Profile->OK

It’s working well inside the Network but I can’t connect to a VPN from outside the network.

I added:

/ip firewall filter add chain=input protocol=tcp dst-port=1723 action=accept comment=“Allow IN PPTP/TCP1723” disabled=no
/ip firewall filter add chain=output protocol=tcp dst-port=1723 action=accept comment=“Allow OUT PPTP/TCP1723” disabled=no
/ip firewall filter add chain=input protocol=gre action=accept comment=“Allow IN PPTP/GRE” disabled=no
/ip firewall filter add chain=output protocol=gre action=accept comment=“Allow OUT PPTP/GRE” disabled=no

but unfortunately it didn’t help

I also found this:

/ip firewall service-port enable pptp

But it didn’t help either. I am running out of ideas, please help.
When answering, please take into account that I’m just starting my adventure with MikroTik.

I wish you gifts like this!

2

Hey! Congratulations! :slight_smile: Have you enabled PPTP server, added user, configured local and remote addresses?

3

Thank you.
I have definitely enabled PPTP server.
I don’t know if I added an user but I added a profile with an IP pool:

PPP → Profiles → PPTP Profile, Local address: 192.168.0.85, Remote Address: PPTP_Pool → OK

Is that what you meant?
How can I check the configuration of local and remote addresses?
Everything I did - I described it in first post.

@Anumrak
Oh, user is a secret, then yes, I added:

PPP → Secret → + → Name: VPNName, Password: VPNPassword, service: pptp, Profile: PPTP_Profile->OK

4

Can you please explain why you chose PPTP over (i.e.) L2TP IPSEC?

5

Hello.
I read in an article that PPTP is the easiest method to configure.
Still, I can’t connect from outside the Network.

I’ve found that I got no Default Gateway after connect to VPN (inside the Network):

Does this bring us closer to solution?

6

You don’t need output rules for PPTP server, all outgoing connections will be related or .
Are your input rules before default input drop all rule?
Local address and remote address should be from same subnet, they need to talk to each other.

7

Are your input rules before default input drop all rule?
I just wanted to write that this is it.
I added these rules from the terminal, and the terminal always adds positions at the end.
Such a simple matter, and so much torment.

Thank you.