MikroTik Router OS V3.0 User Manual

							max-mtu: 1460max-mru: 1460mrru: disabledauthentication: mschap2,mschap1keepalive-timeout: 30default-profile: default[admin@MikroTik] interface pptp-server server>
PPTP Tunnel Interfaces
Home menu level:/interface pptp-server
Description
 	 
 
  

	 &


 
 
 $$$ ( 
	

 7 
	
  	
 
	




 +
 

	  	
  	 


 
	 
 
 (
 ( !
	
 

	 	
	 	

	
(  
  	 
 
 
 
 	
	 

	 
	 &
 	  
 	
  
 	
	  5
	 

	 	 	 
 
 
 	
	
	 
(
	   


 	
 
 
	  

 	
 	
 

 
	
 

 & 
 	 
 

  	
(
		 	 
 	
 

  
 		
 


 

	 
  
 	 
	 5
	


	 		 
 	  


 	
 		 
 
  


  
   


 
 


 	
  
	
  
 
 
	

 & 	 
 	    
 	



   
	
  	
 	 
	
 

  1  
 
  	 
  
	

	



	
 
 
 	 $$$  
  
  7 
	
 

  

 	
$$$ 
	


Property Description
client-address(read-only: IP address) - shows the IP address of the connected client
encoding(read-only: text) - encryption and encoding (if asymmetric, separated with /) being used
in this connection
mru(read-only: integer) - clients MRU
mtu(read-only: integer) - clients MTU
name(name) - interface name
uptime(read-only: time) - shows how long the client is connected
user(name) - the name of the user that is configured statically or added dynamically
Example
 	 	 
	
 

 !
[admin@MikroTik] interface pptp-server> add user=ex1[admin@MikroTik] interface pptp-server> printFlags: X - disabled, D - dynamic, R - running# NAME USER MTU CLIENT-ADDRESS UPTIME ENC...0 DR  ex 1460 10.0.0.202 6m32s none1 pptp-in1 ex1[admin@MikroTik] interface pptp-server>
*
 
 	 	
 		 


  
  
 
  4
 	 9 
 

	

	

!	
  
  	
 
 
 ! 
	

  	 	 

	
Page 230 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							PPTP Application Examples
Router-to-Router Secure Tunnel Example
 
  	
 	  



 
 *

	

 
 	
 

 $$$ 


 ( 
 *




 	 
 
 
 
 	
•=, >
*

	 A	,  /./
						

							[admin@HomeOffice] ppp secret>

 
    	 
 
 $$$ ( 

[admin@HomeOffice] interface pptp-server> add user=ex[admin@HomeOffice] interface pptp-server> printFlags: X - disabled, D - dynamic, R - running# NAME USER MTU CLIENT-ADDRESS UPTIME ENC...0 pptp-in1 ex[admin@HomeOffice] interface pptp-server>
+
 
	 
 ( 
  
	
[admin@HomeOffice] interface pptp-server server> set enabled=yes[admin@HomeOffice] interface pptp-server server> printenabled: yesmax-mtu: 1460max-mru: 1460mrru: disabledauthentication: mschap2keepalive-timeout: 30default-profile: default[admin@HomeOffice] interface pptp-server server>
+ 	 $$$ 

 
 
 
  

[admin@RemoteOffice] interface pptp-client> add connect-to=192.168.80.1 user=ex \\... password=lkjrht disabled=no[admin@RemoteOffice] interface pptp-client> printFlags: X - disabled, R - running0 R name=pptp-out1 mtu=1460 mru=1460 mrru=disabled connect-to=192.168.80.1user=ex password=lkjrht profile=default add-default-route=noallow=pap,chap,mschap1,mschap2[admin@RemoteOffice] interface pptp-client>
 	 $$$ 


  	
 

 
 
  


   	
 F


 

7
7

 






 
 
 
 *$ 	 /../.:/ 	
 /../.:- 	
 	 
 *
 
	 %
%

	

 

 
 
 ( 
 	
 


Page 232 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							 
 
 	 *

	

 ( 
 $$$ 


  
 
 	 
 

[admin@HomeOffice] > ip route add dst-address 10.150.1.0/24 gateway 10.0.103.2[admin@RemoteOffice] > ip route add dst-address 10.150.2.0/24 gateway 10.0.103.1
 
 
 $$$ ( 
 	
 	

	
(  
 

		
  
  
	


[admin@HomeOffice] ppp secret> print detailFlags: X - disabled0 name=ex service=pptp caller-id= password=lkjrht profile=defaultlocal-address=10.0.103.1 remote-address=10.0.103.2 routes==
[admin@HomeOffice] ppp secret> set 0 routes=10.150.1.0/24 10.0.103.2 1[admin@HomeOffice] ppp secret> print detailFlags: X - disabled0 name=ex service=pptp caller-id= password=lkjrht profile=defaultlocal-address=10.0.103.1 remote-address=10.0.103.2routes=10.150.1.0/24 10.0.103.2 1
[admin@HomeOffice] ppp secret>

 
 $$$ 


 




[admin@RemoteOffice]> /ping 10.0.103.110.0.103.1 pong: ttl=255 time=3 ms10.0.103.1 pong: ttl=255 time=3 ms10.0.103.1 pong: ttl=255 time=3 msping interrupted3 packets transmitted, 3 packets received, 0% packet lossround-trip min/avg/max = 3/3.0/3 ms

 
 



 
 
 $$$ 


 
 
 A	,  

	
Page 233 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							[admin@RemoteOffice]> /ping 10.150.2.25410.150.2.254 pong: ttl=255 time=3 ms10.150.2.254 pong: ttl=255 time=3 ms10.150.2.254 pong: ttl=255 time=3 msping interrupted3 packets transmitted, 3 packets received, 0% packet lossround-trip min/avg/max = 3/3.0/3 ms
  	 A+9 ( 
  


 	  
 	 
 
 %F*$% 

  
 	
	  

 	   
	 ( 
 


 	 

 
 %@% 


Connecting a Remote Client via PPTP Tunnel
 
 	   
 


 	 
 
 	 
  

 ( $$$ 





 (
 
	
 
 	
 *$ 	  
 	 

 	 
 
  	 &

 
 

 ( F*$ 



$	 

 
 
( 	
	 
  
 
  	 $$$ 

 
 
 
	 E 	 

 
 
 
 	
•=
 >
*

	 *



 /;-/GCC//1-D
*

	   /./
						

							 
 
 $$$ ( 	  
  
   
 


[admin@RemoteOffice] ppp secret> add name=ex service=pptp password=lkjrhtlocal-address=10.150.1.254 remote-address=10.150.1.2[admin@RemoteOffice] ppp secret> print detailFlags: X - disabled0 name=ex service=pptp caller-id= password=lkjrht profile=defaultlocal-address=10.150.1.254 remote-address=10.150.1.2 routes==
[admin@RemoteOffice] ppp secret>

 
    	 
 
 $$$ ( 

[admin@RemoteOffice] interface pptp-server> add name=FromLaptop user=ex[admin@RemoteOffice] interface pptp-server> printFlags: X - disabled, D - dynamic, R - running# NAME USER MTU CLIENT-ADDRESS UPTIME ENC...0 FromLaptop ex[admin@RemoteOffice] interface pptp-server>
+
 
 ( 
  
	
[admin@RemoteOffice] interface pptp-server server> set enabled=yes[admin@RemoteOffice] interface pptp-server server> printenabled: yesmax-mtu: 1460max-mru: 1460mrru: disabledauthentication: mschap2keepalive-timeout: 30default-profile: default[admin@RemoteOffice] interface pptp-server server>
#
	 
  +$ 
  
	 
 
 % % 

	
[admin@RemoteOffice] interface ethernet> set Office arp=proxy-arp[admin@RemoteOffice] interface ethernet> printFlags: X - disabled, R - running# NAME MTU MAC-ADDRESS ARP0 R ToInternet 1500 00:30:4F:0B:7B:C1 enabled1 R Office 1500 00:30:4F:06:62:12 proxy-arp[admin@RemoteOffice] interface ethernet>
PPTP Setup for Windows

 ( $$$ 

 
  6
 9 -... F ;C!F 	
 ;C 6
 ;C!F -... 	

F 
 
 
 
 6
 
  	
	
	 

	 $$$ # ;
						

								
		 
 
 
  +5*0! (   	


	


 
  
 



 
	 

 
 	
 

 
 %


% 


 *
  
 
	
 





 
  
  
	
 %9
)F0*% %*$B1!$B 	
% 	
 %A 
 
 

% 	


  
 
  
 



  

  
 
 	
 
 %


% 


  

 

	 
 %O
	 $(	
 9

% 
  6
 ;C!F  
 
 %!


% 
  
 	

%!
	
% 
 !
 %3

 $	
% 
 %+1( $	% 
 
 %6
 
% 
	 
 

%3
	

% 
	  

		

 	
 %5
	% I 
 
 

  
 
  
	 	
 
%O
	 $(	
 9

% 
  

	
Troubleshooting
Description
•4  	
$  4 
 

  55#5 

	  
 3$ 



 
 
 /N-: 	
 	 
 
 

 

  
 +
*$ 
 DN   	 

Page 236 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							VLAN
Document revision 1.3 (October 11, 2007, 17:38 GMT)
This document applies to MikroTik RouterOS V3.0
Table of Contents
TableofContents
GeneralInformation
Summary
Specifications
Description
AdditionalDocuments
VLANSetup
PropertyDescription
Notes
Example
ApplicationExample
VLANexampleonMikroTikRouters
General Information
Summary
OA+9  	
 

	

  
 C.-/@ OA+9 
   
 ! *
 	  
 	(

 O
	 A+9 
 	 
 


   

	 (
 
 	
 
 	
 A+9


 *
 
  
 D.;< OA+9 

	 	 
 	 
8 OA+9 *5  


 ( OA+9

 	 	   	
 	
	
 	
 
 

 3 	
 A
 	 	
 	
 A	
- 
  OA+9 
 
	 
 



 	
 

 
 
 
 
 	 	



+ OA+9  	 	 
 
	
 	 
  
 
	
 	  
  	 


 
 	

 	
 A+9 



  
 	 
	

  
 

 OA+9 
 	 	 



  
 	
 
 	(
 


 
 	
  	 	 

 
	

 	



	1
  	 	

	

 		

 	
 
	
 
Specifications
Packages required:system
License required:level1 (limited to 1 vlan), level3
Home menu level:/interface vlan
Standards and Technologies:VLAN(IEEE802.1Q)
Hardware usage:Not significant
Description
OA+9 	  	 	  
 	 
  
 
 

  
	
 
  	 	 


		
  	
 
   *
 	 	  

 	 	
 
 	 
 

 (	
Page 237 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners. 
						

							



 	
 6

 	 
 
 
  
	
	 	 
	

 6
 
 OA+9 


(  
	
 
 
 
 

7
 
 	( 
  

 
  	
 	 
	 


	
  OA+9 
 
 

E 	
   
 ! &	  	 3 * ! A
 	
 
 
 
 
 	 

	
 	  	 
 	
 	
 
 	 

+ OA+9  
  !* A	 - 
 	
   4
 	 	
 
 

 

	 

 	
 



OA+9  	 
 	 F


 
E 	
 	 
	

 OA+9 (  
 	
 
 
 OA+9 

	 
 	 
 


	 9
 
	
 	 OA+9  

 	  


 
 & 
  

 	( 	

	  
 
	

+3 	  
 	
 

 
 	 
	

 	 
 
 ( OA+9 	 
 

	
  

	 *
 
    

 	 	
	
 
 OA+9 
 
 


	 
  

  
 	( OA+9 
 
 	  

	 


  
 	


 

	
Currently supported Ethernet interfaces
  	 
  

 

	 
  OA+9 	 

 	
  9
 
	
 
 
  	


 

	 
	
 
 OA+9 
 
 4
  

  
 
 F


 

	

 OA+9
•	
 C/:;
•*

 $ 1/..
•*

 $ /... ( 		

•9	

	 !

 5$C:C/G 	 	 &
) +5-.. 
	 F


 
) +5 -D
	
•9	

	 !

 5$C:C/< &! 
	 F


•O*+ OG/.
						

							•

11

1
1
1-../1.:. enable 0[admin@MikroTik] interface vlan> printFlags: X - disabled, R - running# NAME MTU ARP VLAN-ID INTERFACE0 R test 1500 enabled 1 ether1[admin@MikroTik] interface vlan>
Application Example
Page 239 of 480Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.Other trademarks and registred trademarks mentioned herein are properties of their respective owners.