Setup guide

Summary
PPTP (Point to Point Tunnel Protocol) supports encrypted tunnels over IP. The Wandy RouterOS
implementation includes support for PPTP client and server.
General applications of PPTP tunnels:
• For secure router-to-router tunnels over the Internet
• To link (bridge) local Intranets or LANs (when EoIP is also used)
• For mobile or remote clients to remotely access an Intranet/LAN of a company (see PPTP
setup for Windows for more information)
Each PPTP connection is composed of a server and a client. The Wandy RouterOS may function
as a server or client - or, for various configurations, it may be the server for some connections and
client for other connections. For example, the client created below could connect to a Windows
2000 server, another Wandy Router, or another router which supports a PPTP server.
Specifications
Packages required: ppp
License required: level1 (limited to 1 tunnel), level3 (limited to 200 tunnels), level5
interface pptp-server, /interface pptp-client
Standards and Technologies: PPTP (RFC 2637)
Hardware usage: Not significant
Related Documents
• Package Management
• IP Addresses and ARP
• AAA
• EoIP Tunnel Interface
Description
PPTP is a secure tunnel for transporting IP traffic using PPP. PPTP encapsulates PPP in virtual lines
that run over IP. PPTP incorporates PPP and MPPE (Microsoft Point to Point Encryption) to make
encrypted links. The purpose of this protocol is to make well-managed secure connections between
routers as well as between routers and PPTP clients (clients are available for and/or included in
almost all OSs including Windows).
PPTP includes PPP authentication and accounting for each PPTP connection. Full authentication
and accounting of each connection may be done through a RADIUS client or locally.
MPPE 40bit RC4 and MPPE 128bit RC4 encryption are supported.
PPTP traffic uses TCP port 1723 and IP protocol GRE (Generic Routing Encapsulation, IP protocol
ID 47), as assigned by the Internet Assigned Numbers Authority (IANA). PPTP can be used with
most firewalls and routers by enabling traffic destined for TCP port 1723 and protocol 47 traffic to
be routed through the firewall or router.
PPTP connections may be limited or impossible to setup though a masqueraded/NAT IP
connection. Please see the Microsoft and RFC links at the end of this section for more information.
Additional Documents
• http://msdn.microsoft.com/library/backgrnd/html/understanding_pptp.htm