Tuesday, September 25, 2012

VPN Server with MikroTik RB750 or RB1000


In this article I will be sharing about how to create a VPN server with MikroTik RB750 using PPTP protocol. One of the benefits is that we can create a VPN connection between computers in the workplace with a computer at home. Here's a picture that I use network topology:
 

Because by default MikroTik RB750 has been configured as an Internet gateway, so here I just add another few settings so that we can make VPN Server. Here are the steps on how to create a VPN server with MikroTik RB750 using PPTP protocol.
  1. Turn off the DHCP client on the interface 0 (ether1-gateway)                                                      ip dhcp-client disable 0
  2. Provide IP Address Public on ether1-gateway
    ip address add address=121.212.12.12/29 interface=ether1-gateway
  1. Add IP Filter Firewall follows:                                                                                                      ip firewall filter add chain=input in-interface=ether1-gateway connection-state=new acction=accept
  2. Add Create IP Pool, to provide dynamic IP address for the VPN client connected.                    ip pool add name=vpn-pool ranges=10.10.10.2-10.10.10.5
  3. Create PPP Profile
    ppp profile add name=vpn-profile local-address=10.10.10.1 remote-address=vpn-pool
  4. Create PPP Secret
    ppp secret add name=user-vpn01 password=user-password01 service=pptp profile=vpn-profile
  5. Enable PPTP Server
    interface pptp-server server set enable=yes


Creating a VPN Client in Windows XP
Once the VPN server on MikroTik RB750 work we created, the next step is to create a VPN Client on our home computer. Here I will outline langkah2 make VPN Client on the computers that use Windows XP.

     Open the Control Panel - Network Connections icon click
     Click Create a new connection - click Next
     In the Network Connection Type window, select Connect to the network at my workplace - click Next
     In the Create the following connection option, select Virtual Private Network connection - click Next
     Fill in the fields Company Name, eg VPNKU - click Next
     In the next window enter the IP address of the MikroTik RB750 public address which we will call, ie 121.212.12.12
     Click Next - Click Finish.
     To try VPN, double click the icon VPNKU, the Connect window VPNKU fill-vpn01 username = user password = user-password01 as it was made before.
     If already connected will be no notification "VPNKU is now connected" right corner of the monitor. To view the network status information, double click the icon aja and we will get something like the following:

Now your computer is connected to a LAN network using a gateway Mikrotik RB750, we can perform data transfer to a printer sharring printer, server remotely and so forth. Our internet connection was already using the gateway MikroTik RB750, to try to do the command tracert google.com wrote and note the difference between pre-connect and post-connect to the  VPN.

Gud luck