Difference between revisions of "Configure VPN Server"
Line 99: | Line 99: | ||
Select "Profiles" tab from PPP interface add new profile. | Select "Profiles" tab from PPP interface add new profile. | ||
− | From the "General" tab | + | From the "General" tab fill the new profile name and select "bridge_tunnel" from drop-down list. |
Select "Protocols" tab and check "yes" from "Use Encryption". | Select "Protocols" tab and check "yes" from "Use Encryption". | ||
Line 107: | Line 107: | ||
[[File:Mikrotik18.png|1024px|center]] | [[File:Mikrotik18.png|1024px|center]] | ||
+ | |||
+ | |||
+ | From PPP interface select "Secrets" tab and create new secret. | ||
+ | |||
+ | Fill with the name and password and select the profile you have created above. | ||
+ | |||
+ | |||
+ | [[File:Mikrotik19.png|1024px|center]] |
Revision as of 07:56, 3 June 2013
Before start configure VPN server download the Configuration tool for RouterOS.
Run Winbox.exe and wait 5-10 sec. until the IP and MAC adress will apear.
A pop-up window will apear and choose "Remove Configuration" otherwise the router will create a default configuration.
First step is to create a static IP for your internet connection.
Select "Addresses" from "IP" and click the plus sign.
We used IP 10.3.0.80 which is a local IP from the main router IP Pool and
we have forwarded the 1723 port.
Route IP for internet access.
Add IP 0.0.0.0/0 in "Dst. Address:" box. In "Gateway" box add your ISP gateway.
Select "Bridge" from the left menu and add new bridge.
From the same interface select "Ports" tab and add interfaces ether1 and ether2 to "bridge_internet"
Now repeat the step above and create a new bridge.
Make sure the "ARP" is disabled!
From the same interface click on "STP" tab, check "Protocol mode: rstp" and apply.
Select "Ports" tab from the "Bridge" interface and add new bridge port.
Select "ether3" and "bridge_tunnel" from the drop-down list.
Create a third bridge, "bridge_local" with "ARP" enabled then same as above, select "STP" tab, check "Protocol mode: rstp" and apply.
Return to the IP->Address List interface and add "192.168.0.2/16" to "bridge_local".
Select "Profiles" tab from PPP interface add new profile.
From the "General" tab fill the new profile name and select "bridge_tunnel" from drop-down list.
Select "Protocols" tab and check "yes" from "Use Encryption".
From PPP interface select "Secrets" tab and create new secret.
Fill with the name and password and select the profile you have created above.