Allied Telesis AT-WR4500 manual Enable the Pptp server, IP Addresses and ARP PPP User AAA EoIP

AT-WR4500 Series - IEEE 802.11abgh Outdoor Wireless Routers	179
RouterOS v3 Configuration and User Guide

Quick Setup Guide

To make a PPTP tunnel between 2 RouterOS routers with IP addresses 10.5.8.104 (PPTP server) and 10.1.0.172 (PPTP client), follow the next steps.

Configuration on PPTP server router:

Add a user:

[admin@PPTP-Server] ppp secret> add name=jack password=pass \ \... local-address=10.0.0.1 remote-address=10.0.0.2

Enable the PPTP server:

[admin@PPTP-Server] interface pptp-server server> set enabled=yes

Configuration on PPTP client router:

Add the PPTP client:

[admin@PPTP-Client] interface pptp-client> add user=jack password=pass \ \... connect-to=10.5.8.104 disabled=no

Specifications

Packages required: ppp

License required: Level1 (limited to 1 tunnel) , Level3 (limited to 200 tunnels) , Level5

Submenu level: /interface pptp-server, /interface pptp-client

Standards and Technologies: PPTP (RFC 2637)

Hardware usage: Not significant

RelatedTopics

IP Addresses and ARP

PPPUser AAA EoIP

Description

PPTP is a secure tunnel for transporting IP traffic using PPP. PPTP encapsulates PPP in virtual lines that run over IP. PPTP incorporates PPP and MPPE (Microsoft Point to Point Encryption) to make encrypted links. The purpose of this protocol is to make well-managed secure connections between routers as well as between routers and PPTP clients (clients are available for and/or included in almost all OSs including Windows).

Multilink PPP (MP) is supported in order to provide MRRU (the ability to transmit full-sized 1500 and larger packets) and bridging over PPP links (using Bridge Control Protocol (BCP) that allows to send raw Ethernet frames over PPP links). This way it is possible to setup bridging without EoIP. The bridge should either have an administratively set MAC address or an Ethernet-like interface in it, as PPP links do not have MAC addresses.

PPTP includes PPP authentication and accounting for each PPTP connection. Full authentication and accounting of each connection may be done through a RADIUS client or locally.

MPPE 40bit RC4 and MPPE 128bit RC4 encryption are supported.

PPTP traffic uses TCP port 1723 and IP protocol GRE (Generic Routing Encapsulation, IP protocol ID 47), as assigned by the Internet Assigned Numbers Authority (IANA). PPTP can be used with most firewalls and routers by enabling traffic destined for TCP port 1723 and protocol 47 traffic to be routed through the firewall or router.

PPTP connections may be limited or impossible to setup though a masqueraded/NAT IP connection. Please see the Microsoft and RFC links listed below for more information.