Difference between revisions of "Configure VPN Server"

From Idrive
Jump to navigation Jump to search
(Blanked the page)
 
(61 intermediate revisions by the same user not shown)
Line 1: Line 1:
==Mark Notes==
 
  
To Do: set time and timezone
 
set secure password / change user name?
 
 
<br\><br\>
 
 
==Initial Configuration Setup==
 
 
===Set up RB2011LS-IN Router for initial configuration===
 
 
Connect to power
 
 
Connect cat 5 cable from Port ETH6 to the NIC for Idrive wireless
 
 
*Network connection setting on the computer:
 
 
::-192.168.88.10
 
 
::-255.255.255.0
 
 
<br\><br\>
 
 
===Connect using Winbox===
 
 
[[File:rb2011__initial_login.jpg|500px|thumb]]
 
 
Download and install Winbox [http://download2.mikrotik.com/winbox.exe Configuration tool for RouterOS].
 
 
Run Winbox.exe or double click the icon on the desktop
 
 
[[File:winbox_icon.jpg|100px]]
 
 
*Enter the Default "Connect To" IP Address is 192.168.88.1
 
 
*Login: admin
 
 
*password: blank
 
 
*Click "Connect"
 
 
Document the MAC address for entry into AdminCenter
 
 
Click on "Connect"
 
 
 
<br\><br\><br\><br\>
 
 
===Initial Log in===
 
 
 
[[File:Mikrotik2.png|500px|thumb]]
 
 
A pop-up window will appear and choose "Remove Configuration" otherwise the router will create a default configuration.
 
 
 
<br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\>
 
 
==Setup using Restore configuration file (Recommended)==
 
 
===Load Idrive Standard configuration===
 
 
[[File:rb2011_restore_config.jpg|600px|thumb]]
 
 
For simplicity and consistency it is better to set the routers configuration using the RouterOS backup/restore function. This "restores" the standard idrive configuration from a .backup file. This will leave only a few custom settings that are specific to the customer location(s).
 
 
 
*Download the most current .backup file from [https://admincenter.idrive.pro/wiki/index.php?title=Idrive_Downloads Admin Center]
 
 
*Unzip the file to the Desktop on your computer
 
 
*In WinBox select “Files” from the left menu to open the Files List window.
 
 
*Use the mouse to drag and drop the configuration file from the Desktop into the Files List (uploads the file to the Router)
 
 
*Highlight the config file and click on "Restore"
 
 
 
<br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\><br\>
 
 
===Set Customer/Location Specific Settings===
 
 
====Static Internet IP Address====
 
 
[[File:rb2011_static_ip_setting.jpg|600px|thumb]]
 
 
Set the Base Station Static IP address and Gateway (must obtain the information from the customers ISP)
 
 
*In WinBox select “IP” from the left menu and from the pull-down menu select "Addresses" to open the Address List window.
 
 
*Double click on the line that has the Interface "ether1" to edit the Address properties
 
 
[[File:rb2011_ether1_address.jpg|200px|]]
 
 
After this only thing that needs to be changed is the IP addresses of the Base Station equipment (RB2011LS-IN), port “ether1”, for internet connection,
 
 
using Winbox  under “IP” section > “Addressed” and gateway under  “IP” section > “Routes” (0.0.0.0/0 to x.x.x.x).
 
 
 
 
<br\><br\><br\><br\><br\><br\><br\><br\>
 
 
====Static Routes====
 
 
[[File:rb2011_static_route_setting.jpg|600px|thumb]]
 
 
*In WinBox select “IP” from the left menu and from the pull-down menu select "Routing" to open the Route List window.
 
 
*Double click on the line that has the Interface "ether1" to edit the Address properties
 
 
[[File:rb2011_ether1_address.jpg|200px|]]
 
 
<br\><br\><br\><br\><br\><br\>
 
 
====Timezone====
 
 
<br\><br\>
 
 
====What Else?====
 
 
<br\><br\>
 
 
==Setup using manual method==
 
 
 
 
===create a static IP for your internet connection===
 
First step is to create a static IP for your internet connection.
 
 
 
[[File:Mikrotik3.png|500px|center]]
 
 
 
Select "Addresses" from "IP" and click the plus sign.
 
 
 
[[File:Mikrotik4.png|500px|center]]
 
 
 
We used IP 10.3.0.80 which is a local IP from the main router IP Pool and
 
we have forwarded the 1723 port.
 
 
 
[[File:Mikrotik5.png|500px|center]]
 
 
 
Route IP for internet access.
 
 
 
[[File:Mikrotik6.png|500px|center]]
 
 
 
Add IP 0.0.0.0/0 in "Dst. Address:" box. In "Gateway" box add your gateway.
 
 
 
[[File:Mikrotik7.png|500px|center]]
 
 
 
Select "Bridge" from the left menu and add new bridge.
 
 
 
[[File:Mikrotik8.png|500px|center]]
 
 
 
From the same interface select "Ports" tab and add interfaces ether1 and ether2 to "bridge_internet"
 
 
 
[[File:Mikrotik9.png|500px|center]]
 
 
 
[[File:Mikrotik10.png|500px|center]]
 
 
 
Now repeat the step above and create a new bridge.
 
 
Make sure the "ARP" is disabled!
 
 
 
[[File:Mikrotik11.png|500px|center]]
 
 
 
From the same interface click on "STP" tab, check "Protocol mode: rstp" and apply.
 
 
 
[[File:Mikrotik12.png|500px|center]]
 
 
 
Select "Ports" tab from the "Bridge" interface and add new bridge port.
 
 
Select "ether3" and "bridge_tunnel" from the drop-down list.
 
 
 
[[File:Mikrotik13.png|500px|center]]
 
 
 
Create a third bridge, "bridge_local" with "ARP" enabled and add MAC Address: 00:00:5E:80:01:01.
 
 
Select "STP" tab, check "Protocol mode: rstp" and apply.
 
 
 
[[File:Mikrotik14.png|500px|center]]
 
 
 
[[File:Mikrotik15.png|500px|center]]
 
 
 
Return to the IP->Address List interface and add "192.168.0.2/16" to "bridge_local".
 
 
 
[[File:Mikrotik16.png|500px|center]]
 
 
 
Select "Profiles" tab from PPP interface add new profile.
 
 
From the "General" tab fill the new profile name and select "bridge_tunnel" from drop-down list.
 
 
Select "Protocols" tab and check "yes" from "Use Encryption".
 
 
 
[[File:Mikrotik17.png|500px|center]]
 
 
[[File:Mikrotik18.png|500px|center]]
 
 
 
From PPP interface select "Secrets" tab and create new secret.
 
 
Fill with the name and password and select the profile you have created above.
 
 
 
[[File:Mikrotik19.png|500px|center]]
 
 
 
Select "SSTP Server" from PPP->Interface, check 1723 port, select "default-encryption" and uncheck "pap" and "chap" authentication.
 
 
 
[[File:Mikrotik20.png|500px|center]]
 
 
 
If the VPN client is configured the connection will start automatically. If the VPN client is not configured, check [[Configure VPN Client]].
 
 
To check active connection select PPP->Active Connection or Bridge->Ports.
 
 
 
[[File:Mikrotik22.png|500px|center]]
 
 
 
Add the rest of interfaces to "bridge_local" in order to use the router in network.
 
 
 
[[File:Mikrotik21.png|500px|center]]
 

Latest revision as of 18:16, 7 November 2014