Community discussions

MikroTik App
 
jda
just joined
Topic Author
Posts: 21
Joined: Thu Jun 04, 2015 11:34 am

Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 2:35 pm

I have just upgraded to a new RB750Gr3 by manually importing the DHCP, DNS, etc. settings - but from the outset use the defaults of the current version of RouterOS (6.49.7) - and e.g. the firewall rules have been set up much better than on the old box.

When setting up the new box I used the "QuickSet" to enable VPN. And that turns out to be PPTP - and I can connect from a Windows using the built-in VPN. Very easy!

However, I normally work from a Mac and PPTP has been removed since the last couple of OS versions due to less security. I used to use L2TP - and I guess that is still a good choice now.

But since everything has become so easy I was trying to find the "easy" way to change my current PPTP setup on the router to L2TP using the "current best practice" (instead of following my very old steps from last time).

Does anyone have a pointer to a good description and/or some advice/experience?

Thanks in advance!

/John
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 3:09 pm

Yes, use wireguard instead. Easy peasy.
 
jda
just joined
Topic Author
Posts: 21
Joined: Thu Jun 04, 2015 11:34 am

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 3:16 pm

Hi @anav

Don't know wireguard - but a quick look says that this is a fast and simple VPN solution. But can it be installed as a "module" (or another way) in the RouterBoard on the MikroTik box?

... or do I misunderstand what you suggest?

I already have Viscosity and TunnelBlick on the clients so would prefer to use those (I have bought Viscosity so preferably that).
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 3:56 pm

Viscosity/Tunnelblick is simply OPENVPN (and if you had this why did you bother with insecure PPTP VPN??)

In any case, yes wireguard is a module already existing within the Router, clients are free so you dont need to buy anything and you get a secure faster vpn experience.
 
jda
just joined
Topic Author
Posts: 21
Joined: Thu Jun 04, 2015 11:34 am

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 6:06 pm

Thanks @anav

The only reason I started with PPTP is that I just tried the QuickSet feature - and later discovered that it was PPTP :-)

I found the description (https://help.mikrotik.com/docs/display/ROS/WireGuard) and will go that route.

Thanks for the pointer!

/John
 
User avatar
anav
Forum Guru
Forum Guru
Posts: 19323
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada
Contact:

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?  [SOLVED]

Tue Oct 25, 2022 6:41 pm

I prefer;;;;;;;;;;;; no bias :-) ------> viewtopic.php?t=182340
 
jda
just joined
Topic Author
Posts: 21
Joined: Thu Jun 04, 2015 11:34 am

Re: Best way to change std. PPTP VPN to more secure (like L2TP)?

Tue Oct 25, 2022 6:43 pm

Awesome!! Thanks :D

Who is online

Users browsing this forum: GoogleOther [Bot], holvoetn, nPaceTo and 41 guests