Configure VPN Client - Revision history

Mark: Blanked the page

2014-11-07T18:16:09Z

Blanked the page

Show changes

Mark at 18:10, 7 November 2014

2014-11-07T18:10:29Z

Mark at 18:01, 7 November 2014

2014-11-07T18:01:17Z

Mark at 17:59, 7 November 2014

2014-11-07T17:59:25Z

Mark at 17:57, 7 November 2014

2014-11-07T17:57:37Z

Show changes

Mark at 17:52, 7 November 2014

2014-11-07T17:52:31Z

Show changes

Mark: /* Connect using Winbox */

2013-12-30T23:04:20Z

Connect using Winbox

Mark: /* PPP configuration */

2013-12-30T18:19:14Z

PPP configuration

Mark: /* Bridges configuration */

2013-12-30T18:18:55Z

Bridges configuration

Mark: /* Bridges configuration */

2013-12-30T17:28:00Z

Bridges configuration

@@ Line 1: / Line 1: @@
-==MicroTIC VPN Solution==
+=='''MicroTIC VPN Solution'''==
-Developed for AltaMed and other clients with remote parking locations. Never implimented at a customer location (as of 11/6/14)
+Developed for AltaMed and other clients with remote parking locations. '''Never implimented at a customer location (as of 11/6/14)'''
 <br\><br\>
-==Client Side==
+=='''System Topology Diagrams'''==
 <br\><br\>
@@ Line 412: / Line 431: @@
 <br\><br\>
-==Server Side==
+=='''Server Side'''==
 <br\><br\>
@@ Line 699: / Line 718: @@
 <br\><br\>
-==Configuration files==
+=='''Configuration files'''==
 Will be much easier for us to make the equipment’s configurations using the backup/restore RouterOS function - only thing that have to be changed, after restore, will be the internet connections settings.

@@ Line 704: / Line 704: @@
 Attached you can find the routers configuration (backup) files from our equipment’s that can be restored to the exact ones that you have.
 [[Media:RB2011LS-IN.zip|Idrive-BS1-04062013-1833.backup]]  will be used for RB2011LS-IN, Base station equipment.
 [[Media:RB751u-2HnD.zip|Idrive-TP1-30052013-1851.backup]]  will be used for RB751u-2HnD, TP equipment.

← Older revision		Revision as of 17:59, 7 November 2014
Line 698:		Line 698:

	<br\><br\>		<br\><br\>
		+
		+	==Configuration files==
		+
		+	Will be much easier for us to make the equipment’s configurations using the backup/restore RouterOS function - only thing that have to be changed, after restore, will be the internet connections settings.
		+
		+	Attached you can find the routers configuration (backup) files from our equipment’s that can be restored to the exact ones that you have.
		+
		+	[[Media:RB2011LS-IN.zip\|Idrive-BS1-04062013-1833.backup]] will be used for RB2011LS-IN, Base station equipment.
		+
		+	[[Media:RB751u-2HnD.zip\|Idrive-TP1-30052013-1851.backup]] will be used for RB751u-2HnD, TP equipment.
		+
		+	To be able to create the VPN a public IP will be called from the transfer point equipment (VPN client), so we need a dedicated IP for Base Station router or can be used “port forwarding” (1723 or 443) to one of the private LAN IP’s.
		+
		+	===Restore the configurations===
		+
		+	Get winbox.exe application (the configuration tool for RouterOS)==
		+
		+	http://www.mikrotik.com/download or
		+
		+	https://admincenter.idrive.pro/wiki/images/c/c2/Winbox.zip
		+
		+	1. Run winbox.exe;
		+
		+	2. Connect the router to computer or through a switch. ( works with cat5 cable)
		+
		+	3. Start the application and click the “…” button, wait for equipment MAC address to be listed, click on it and Connect. Use Login name: admin / empty pass
		+
		+
		+	[[File:mikrotik-client1.png\|center]]
		+
		+
		+	4. Select “Files” section from left menu, drag the specific .backup file on the files list and click “Restore”. (copy and paste the file from the hard drive and paste if in the routerboard)
		+
		+
		+	[[File:restore.png\|center]]
		+
		+
		+	After this only thing that needs to be changed is the IP addresses of the Base Station equipment (RB2011LS-IN), port “ether1”, for internet connection, using Winbox under “IP” section > “Addressed” and gateway under “IP” section > “Routes” (0.0.0.0/0 to x.x.x.x).
		+
		+
		+	[[File:ip-restore.png\|center]]
		+
		+	[[File:gateway-restore.png\|1024px\|center]]
		+
		+
		+	For RB751u-2HnD, if the 3G modem is compatible with the equipment you have to set the APN using Winbox under “PPP” > “Interface” > Edit existing connection > General tab > APN and PPP Advanced Mode if requires username and password.
		+
		+
		+	[[File:mikrotik-client4.png\|1024px\|center]]
		+
		+	[[File:mikrotik-client5.png\|1024px\|center]]
		+
		+
		+	Let’s use one computer for this installations that can be accessed via Team Viewer so we can work together on this.

← Older revision		Revision as of 23:04, 30 December 2013
Line 60:		Line 60:

	[[File:rb2011_initial_login_screen.jpg\|400px\|]]		[[File:rb2011_initial_login_screen.jpg\|400px\|]]
		+
		+
		+	Create a backup of the default configuration just in case
		+
		+	Files >Backup
		+
		+	[[File:rb_backup_default_config.jpg\|600px\|]]
		+

	<br\><br\><br\><br\>		<br\><br\><br\><br\>

← Older revision		Revision as of 18:19, 30 December 2013
Line 209:		Line 209:

	Complete the fields then select "Protocols" tab and check "yes" under "Use Encryption".		Complete the fields then select "Protocols" tab and check "yes" under "Use Encryption".
−
−	<span style="color: red"> The pictures below are from the working pair. Alex sent an emial with slightly conflicting information:"From PPP->Profiles->ppp_bridging I set “Use IPv6” to “default”"
−

← Older revision		Revision as of 18:18, 30 December 2013
Line 253:		Line 253:

	for "bridge_tunnel" Make sure the "ARP" is disabled and enter the MAC Address: 00:00:5E:80:01:01 then select "STP" tab and check "Protocol Mode: rstp".		for "bridge_tunnel" Make sure the "ARP" is disabled and enter the MAC Address: 00:00:5E:80:01:01 then select "STP" tab and check "Protocol Mode: rstp".
−
−	<span style="color: red"> The pictures below are from the working pair. Alex sent an email note "I removed the “Admin MAC Address” from the bridge_internet, bridge_local and bridge_tunnel. It seems that the “bridge_local” MAC address is still active (I remember that I removed the MAC address).I set the bridge_tunnel “ARP” to “disabled”.I am not sure if this applies to RB2011 or RB751 or both - Mark

← Older revision		Revision as of 17:28, 30 December 2013
Line 253:		Line 253:

	for "bridge_tunnel" Make sure the "ARP" is disabled and enter the MAC Address: 00:00:5E:80:01:01 then select "STP" tab and check "Protocol Mode: rstp".		for "bridge_tunnel" Make sure the "ARP" is disabled and enter the MAC Address: 00:00:5E:80:01:01 then select "STP" tab and check "Protocol Mode: rstp".
		+
		+	<span style="color: red"> The pictures below are from the working pair. Alex sent an email note "I removed the “Admin MAC Address” from the bridge_internet, bridge_local and bridge_tunnel. It seems that the “bridge_local” MAC address is still active (I remember that I removed the MAC address).I set the bridge_tunnel “ARP” to “disabled”.I am not sure if this applies to RB2011 or RB751 or both - Mark
		+

	[[File:rb751_bridges1.jpg\|700px\|]]		[[File:rb751_bridges1.jpg\|700px\|]]