Profiles
A profile controls IP address assignment, timeouts, DNS, encryption, and other parameters applied to each session.
In WinBox you can create VPN profile in PPP -> Profiles, click on + and create your profile or via Terminal in /ppp profile
, for this configuration
There will several default profiles:
default - Basic profile with minimal config
default-encryption - Enables encryption
Creating IP pool for clients
You need to create IP pool or range from which will be IP addresses assigned to users.
Let's say we have second network for VPN users (e.g. 10.10.10.0/24
), where 10.10.10.1 is the gateway, so we need to create IP pool in range from 10.10.10.2
to 10.10.10.254
/ip pool add name="vpn-pool" ranges=10.10.10.2-10.10.10.254
Creating custom profile
Click on + to add new profile, and you will need define:
Name - Your profile name, (e.g. vpn-users)
Local Address - Router IP, end of tunnel (e.g. 10.10.10.1)
Remote Address - IP pool or range for clients, (e.g. )
DNS Servers - (Optional) Which DNSs should clients use, (e.g.
1.1.1.1
,8.8.8.8
)
/ppp profile add name="vpn-users" local-address="10.10.10.1" remote-address=vpn-pool dns-servers=10.10.10.1,1.1.1.1,8.8.8.8
Last updated