Wesley Levels's Blog

I wanted to configure my MikroTik Router so I can remotely connect to my home network.
I configured my MikroTik to be a PPTP Server.

This is what was needed to configure a RouterOS based router to accept a PPTP Client session:

1. Add a user

CLI:

# /ppp secret
# add name=[testuser] password=[testpassword] service=pptp 

GUI:

• Login using Winbox.
• Go to PPP – Secrets
• Press “+” to add a user.
• Configure a “Name” and a “Password”.
• Use the Service Dropdown to select “PPTP”.

2. Enable the PPTP Server

CLI:

# /interface pptp-server server
# set enabled=yes

GUI:

• Go to PPP – Interface
• Press “PPTP Server” button.
• Enable the PPTP Server.

The part where you select that the user is only for the PPTP service is optional, however it is slightly more secure to enable it only for PPTP.

3. Make sure your firewall accepts TCP 1723/GRE

CLI:

/ip firewall filter
add chain=input protocol=tcp dst-port=1723 action=accept
add chain=input protocol=gre action=accept

GUI:

• Go to IP – Firewall
• Check you filter rules for accepting TCP 1723 and GRE protocol
• If your mikrotik has no specific entries for accepting the above, create two rules:
  • Chain: input, Protocol: tcp, Dst. Port: 1723, Action: accept
  • Chain: input, Protocol:gre, Action: accept