How to set up a remote access VPN

One of the best things that have happened to home office/small office (SOHO) is Mikrotik. Take it from me and am not saying this because of the complexity involved when setting up a Cisco gear;I am a Cisco professional. Mikrotik has made it possible for you to have a wireless outdoor radio with full routing functions, firewall and VPN capabilities all wrapped into one very inexpensive box,plus, it is very easy to configure. What more can you ask for.
Anyway,my aim here is to show you how to set up a remote access VPN using ANY Mikrotik router with a PPP function. Here we go.

(adsbygoogle = window.adsbygoogle || []).push({});

Make sure all the basic configurations needed for your router to access the internet have been entered, have at least one public IP address for users to dial up to. Having done these little things,lets begin. Follow the steps outlined in the pictures below:

 Click on PPP,click on the profile tab, enter any name for the profile, enter the private address on your router LAN interface (this MUST be the interface leading to your private network, the network you want the VPN users to have access to) enter a static address for the user or you can chose from a pool of addresses of you are setting it for more than one user, apply and ok.
Next step:

Under the secret tab, enter user name, password, service should be PPTP or set to any, select the name of the profile you created in step one above;mine was set to profile1, apply and ok.
Next step:
Click on PPP,then under the interface tab, click on PPTP server, click enable, select the profile you created in step one, apply and ok.
Next step:
Here you click on the interface on which you configured the VPN server on (mine was configured on a bridged interface) come down to ARP and choose proxy-arp. If you DO NOT do this, your VPN clients will connect but will not be able to communicate with hosts on the LAN.
Next step:
Yeah!!! We connected to the VPN server. Now here is what happened. Am using Windows 10. To connect, go to network and sharing centre, click on set up a new connection or network (your computer MUST be connected to the internet) click on connect to a work place, click on no,create a new connection,click next, click on use my internet connection, enter the public address on your VPN server, and following the rest steps;it is easy.

As you can see, we can ping a local user on the LAN. So guys thats how easy it is to set up VPN on a Mikrotik router. If you have any questions, dont hesitate to drop your comments. Thank you for reading. 
Spread the love


Ashioma Michael, a BSc (Computer Science)., MTCNA, CCNA, and CCNP holder with many years of industry-proven experience in network design, implementation and optimization. He has tutored and guided many professionals towards obtaining their Cisco certifications. Mike works as a senior network engineer with one of the leading internet service providers in West Africa.

2 thoughts on “How to set up a remote access VPN

  • July 6, 2017 at 9:22 am

    I did everything according to the instructions but after connecting to the VPN not ping the PC on LAN in company

    • July 16, 2017 at 5:52 pm

      Go to the interface on which u configured the vpn server and choose proxy ARP. It stated in the post. Without this, u won't be able to communicate with other systems on the LAN.


Leave a Reply

Your email address will not be published. Required fields are marked *