VPN PPtP SIte 2 Site antara ASTARO dengan Mikrotik

Enable PPTP Remote Access di Astaro Security Gateway

 * Remote Access
   * PPTP
    PPTP remote access status Klik tombol enable

   * Assign IP Addresses by
    pilih : IP address pool

   * Pool Network
    pilih : VPN Pool (PPTP)

   * klik tombol Apply untuk men save konfigurasi dan mengaktifkan PPTP Remote Access


Buat User untuk Login PPTP Client nya

 * Definitions & Users
   * Users & Groups

   * klik New User

    Username    : test123
    Real Name    : Test 123 Juga (optional)
    Email Address    : (optional)

    Authentication    : Local
    Password    : *******
    Repeat        : *******

    Cheklist    : Use static remote access IP
    isi RAS address    : 10.242.1.123

    RAS IP Address di isi sesuai dengan Subnet dari IP Pool VPN Pool (PPTP)

    Comment        : (optional)

   * klik tombol save

Masukan user baru tersebut ke group PPTP Users

 * Remote Access
   * PPTP

     * klik folder di tab Users and Groups
       Browse user test123 & drag & drop di di kolom users & groups
    
     * klik tombol save

Buat Table Routing

 * Interfaces & Routing
   * Static Routing

     * Klik New Static route

       Route Type    : Gateway route
       Network        : 172.16.0.0
       Gateway        : 10.242.1.1

     * Klik Tombol save

Sampai disini konfigurasi di ASG sudah selesai, ada baiknya kita coba dahulu dengan client Windows



Sekarang saatnya konfigurasi mikrotik

* Interfaces

/interface ethernet
set 0 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=\
    no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:3A:D9:7D master-port=\
    none mtu=1500 name=WAN speed=100Mbps
set 1 arp=enabled auto-negotiation=yes bandwidth=unlimited/unlimited disabled=\
    no full-duplex=yes l2mtu=1520 mac-address=D4:CA:6D:3A:D9:7E master-port=\
    none mtu=1500 name=LOCAL speed=100Mbps

* IP Address

/ip address
add address=172.16.0.254/24 comment="default configuration" disabled=n
    interface=LOCAL network=172.16.0.0

* DHCP Client untuk WAN

/ip dhcp-client
add add-default-route=yes comment="default configuration" \
    default-route-distance=1 disabled=no interface=WAN \
    use-peer-dns=yes use-peer-ntp=yes


* Firewall

* Address List
/ip firewall address-list
add address=172.16.0.253 disabled=no list=BOLEH
add address=192.168.10.0/23 disabled=no list=Save-Network
add address=172.16.0.0/24 disabled=no list=Save-Network


* NAT
/ip firewall nat
add action=masquerade chain=srcnat comment="default configuratio
    disabled=no out-interface=WAN src-address-list=BOLEH

* PPTP Client
/interface pptp-client
add add-default-route=no allow=pap,chap,mschap1,mschap2 connect-to=\
    202.xxx.yyy.zzz dial-on-demand=no disabled=no max-mru=1460 max-mtu=\
    1460 mrru=disabled name=pptp-out1 password=******* profile=\
    default-encryption user=test123

* IP Route
/ip route
add disabled=no distance=1 dst-address=0.0.0.0/0 gateway=WAN scope=30 \
    target-scope=10
add disabled=no distance=1 dst-address=192.168.10.0/23 gateway=\
    10.242.1.1 scope=30 target-scope=10