that run over IP. PPTP incorporates PPP and MPPE (Microsoft Point to Point Encryption) to make
encrypted links. The purpose of this protocol is to make well-managed secure connections between
routers as well as between routers and PPTP clients (clients are available for and/or included in
almost all OSs including Windows).
PPTP includes PPP authentication and accounting for each PPTP connection. Full authentication
and accounting of each connection may be done through a RADIUS client or locally.
MPPE 40bit RC4 and MPPE 128bit RC4 encryption are supported.
PPTP traffic uses TCP port 1723 and IP protocol GRE (Generic Routing Encapsulation, IP protocol
ID 47), as assigned by the Internet Assigned Numbers Authority (IANA). PPTP can be used with
most firewalls and routers by enabling traffic destined for TCP port 1723 and protocol 47 traffic to
be routed through the firewall or router.
PPTP connections may be limited or impossible to setup though a masqueraded/NAT IP
connection. Please see the Microsoft and RFC links at the end of this section for more information.
Additional Documents
•
http://msdn.microsoft.com/library/backgrnd/html/understanding_pptp.htm
•
http://support.microsoft.com/support/kb/articles/q162/8/47.asp
•
http://www.ietf.org/rfc/rfc2637.txt?number=2637
•
http://www.ietf.org/rfc/rfc3078.txt?number=3078
•
http://www.ietf.org/rfc/rfc3079.txt?number=3079
PPTP Client Setup
Home menu level: /interface pptp-client
Property Description
add-default-route ( yes | no ; default: no ) - whether to use the server which this client is connected
to as its default router (gateway)
allow ( multiple choice: mschap2, mschap1, chap, pap ; default: mschap2, mschap1, chap, pap ) -
the protocol to allow the client to use for authentication
connect-to ( IP address ) - The IP address of the PPTP server to connect to
mru ( integer ; default: 1460 ) - Maximum Receive Unit. The optimal value is the MRU of the
interface the tunnel is working over decreased by 40 (so, for 1500-byte ethernet link, set the MRU
to 1460 to avoid fragmentation of packets)
mtu ( integer ; default: 1460 ) - Maximum Transmission Unit. The optimal value is the MTU of the
interface the tunnel is working over decreased by 40 (so, for 1500-byte ethernet link, set the MTU
to 1460 to avoid fragmentation of packets)
name ( name ; default: pptp-outN ) - interface name for reference
password ( text ; default: "" ) - user password to use when logging to the remote server
profile ( name ; default: default ) - profile to use when connecting to the remote server
user ( text ) - user name to use when logging on to the remote server
Page 346 of 695
Copyright 1999-2007, MikroTik. All rights reserved. Mikrotik, RouterOS and RouterBOARD are trademarks of Mikrotikls SIA.
Other trademarks and registred trademarks mentioned herein are properties of their respective owners.
