Mikrotik VPN Client
===================

Proxy ARP
---------

Interface
    Name:           bridge1     (interface from which you want to communicate over VPN,
                                 mostly bride1 or ether2)
    ARP:            proxy-arp


VPN Client PPTP, L2TP/IPsec
---------------------------

PPP/Profiles
    (copy default-encryption)

    Name:           vpn-client

    Interface List: LAN         (important)

    Change TCP MMS: yes         (check)
    Use Encryption: yes         (check)


PPP/Interfaces/[+]/PPTP Client
PPP/Interfaces/[+]/L2TP Client

    Name:           pptp-client-{name}
                    l2tp-client-{name}
    ------------------------------------
    Connect To:     {public IP of vpn server}

    User:           {user-name}
    Password:       {user-password}
    Profile:        vpn-client
    ------------------------------------
    (only L2TP)
                    [x] Use IPsec
    IPsec Secret:   {IPsec pre-shared key}
    ------------------------------------
    If you want to route all traffic
    (usually keep disabled)
                    [x] Add Default Route

    Otherwise you have to set route manually (IP/Routes)
    ------------------------------------
    Allow:          [x] mschap2     [ ] mschap1
                    [ ] chap        [ ] pap


--------------------------------------------------------------------------------

Routes (if Default Route is NOT set)
------------------------------------

IP/Routes
    Dst. Address:   {network range you want to access using vpn}
    Gateway:        {name of vpn client}


--------------------------------------------------------------------------------

Firewall
--------

IP/Firewall

    New Terminal -> right click -> Paste

/ip firewall nat
add action=masquerade chain=srcnat out-interface=all-ppp