Mikrotik VPN Server L2TP/IPsec
==============================


General
-------

# Bridge
#     Name:         bridge1
#     ARP:          proxy-arp


IP/Pool
    Name:           pool-vpn-server
    Addresses:      {vpn-network-range}     (you can create range within
                                             existing local network or
                                             create new local network only
                                             for vpn connections)

IP/Addresses/[+] (only if vpn network range was created)
    Address:        {local-network-for-vpn}
    Network:
    Interface:      bridge1                 (interface of local network,
                                             mostly bride1 or ether2)

--------------------------------------------------------------------------------

PPTP Server
-----------

PPP/Profiles
    (copy default-encryption)

    Name:           vpn-server
    Local Addr:     {router IP}
    Remote Addr:    pool-vpn-server

    Interface List: LAN         (important)

    Change TCP MMS: yes         (check)
    Use Encryption: yes         (check)


PPP/Secrets
    Name:           {user-name}
    Password:       {user-password}
    Service:        any
    Profile:        vpn-server


PPP/Interfaces/[PPTP Server]
                    [x] Enabled
    Default Prfl.:  vpn-server
    Auth.:          mschap2


--------------------------------------------------------------------------------

Firewall (add PPTP rules)
-------------------------

IP/Firewall

    New Terminal -> right click -> Paste

/ip firewall filter
add action=accept chain=input protocol=icmp
add action=accept chain=input connection-state=established
add action=accept chain=input connection-state=related
# pptp
add action=accept chain=input protocol=tcp dst-port=1723 comment=pptp
add action=accept chain=input protocol=gre
# drop
add action=drop chain=input in-interface-list=!LAN comment=drop

/ip firewall nat
add action=masquerade chain=srcnat out-interface-list=WAN