本帖最後由 plc1222 於 2011-6-12 15:56 編輯
PPTP Setup
RB450G 資料
wan ip: 10.1.1.11
lan ip: 192.168.88.1
dhcp pool: 192.168.88.200 - 192.168.88.240
1. Enable pptp server
-> interface pptp-server server; set enabled=yes; set default-profile=default-encryption ; set authentication=pap,chap,mschap1,mschap2
Result:
[admin@MikroTik] /interface pptp-server server> print
enabled: yes
max-mtu: 1460
max-mru: 1460
mrru: disabled
authentication: pap,chap,mschap1,mschap2
keepalive-timeout: 300
default-profile: default-encryption
2. Create pptp client account
-> ppp secret; add name=plc122 service=pptp password=1234 profile=default-encryption local-address= 192.168.88.1 remote-address= 192.168.88.50
Result:
[admin@MikroTik] /ppp secret> print detail
Flags: X - disabled
0 name="plc1222" service=pptp caller-id="" password="1234"
profile=default-encryption local-address=192.168.88.1
remote-address=192.168.88.50 routes="" limit-bytes-in=0
limit-bytes-out=0
3. open port 1723
-> ip firewall filter add chain=input action=accept protocol=tcp dst-port=1723
-> move numbers=4 destination=3
上邊第二句係升一級高過原來的drop filter
得左!


甘樣大家就可以用香港屋企個vpn黎上網. (內地人士岩用)
但問題係access吾到屋企既device NAS之類.
解決方法:
1. 用proxy arp, 但會搞亂個dhcp server
2. 係nat度搞masquerade: ip firewall nat; add chain=srcnat action=masquerade
但加左呢個又有咩問題?
仲有個問題
點解要開兩條rules. 1723 port同Protocol GRE. 吾開gre又會點?
呢個case無開gre都好似無問題. |