How to set up PPTP, SSTP or L2TP VPN on Mikrotik Routers

This tutorial will show you how to set up PPTP, SSTP or L2TP VPN on Mikrotik Routers using the SmartyDNS VPN services. If you don’t have a SmartyDNS account, you can try our services for free for 3 days.

Here are the steps you should follow:

1. Click on “PPP” (1) from the left-side menu and click on “+” (2).

2. Choose “L2TP Client” (3) (or “SSTP Client, or “PPTP Client”).

3. Enter the name of your connection in the “Name” field (5) of the “General” tab (4). For example you can name it “SmartyDNS_UK1_L2TP”.

4. Select the “Dial Out” tab (6).

   Type the IP address of the SmartyDNS VPN server you want to connect to in the “Connect to” box (7).

   To find the entire list of all available servers, sign in to your account on our website, go to “Setup” -> “VPN Servers“. If you don’t have a SmartyDNS account, you can try our services for free for 3 days.

   Type one more time the same hostname in the “Remote ID” field (10).

   Enter your VPN username and password in the “User” and “Password” boxes (8).

   To find your VPN username and password, sign in to your account on our website, go to “Setup” -> “VPN Username & Password“. If you don’t have a SmartyDNS account, you can try our services for free for 3 days.

   Click the “Enable” button (9).

5. Click on the “Status” tab (10).

   Check “Last Link Up Time” (11) and “Uptime” (12) to ensure your VPN connection is UP.

   Press “OK” (13) to close the window.

6. You should see the created “SmartyDNS_UK1_L2TP” L2TP connection (14) in the PPP window. “R” (15) means the VPN connection is ready.

7. Select IP (16) then “Firewall” from the left-side menu, click on the “NAT” tab (17) and click on the “+” icon (18).

8. In the “General” tab (19), choose “srcnat” for “Chain” (20) and “SmartyDNS_UK1_L2TP” for “Out. Interface” (21).

9. Click on the “Action” tab, choose “masquerade” for “Action” (22).

   Click on “Apply” (23) to apply the changes and click on “OK” (24) to close this window.

10. In the “Firewall” window, click on the “Mangle” tab (25) and click on the “+” icon (26).

    In the “Mangle Rule” window, in the “General” Tab (27) select “prerouting” for “Chain” (28).

    Enter the range of IP addresses in your LAN which you want to connect to VPN through this router in the “Src. Address” field (29).

11. Click on the “Action” tab (30), choose “mark routing” for “Action” (31), enter a new routing mark in “New Routing Mark” (32) and check the “Passthrough” checkbox (33).

    Click on “Apply” (34) to apply the changes and click on “OK” (35) to close this window.

12. Click on “IP” (36) and choose “Routes” from the left-side menu.

    Click on the “+” icon (37).

13. In the “General” tab (38), enter “0.0.0.0/0” in the “Dest. Address” field (39).

    Choose “SmartyDNS_UK1_L2TP” from the “Gateway” menu (40).

    Choose “unicast” from the “Type” menu (41).

    From the “Routing Mark” menu (42) choose the routing mark “SmartyDNS_L2TP” created at step 10 in “IP->Firewall->Mangle”.

    Click on “Apply” (43) to apply the changes and click on “OK” (44) to close this window.

14. Select “IP” (45) and “DNS” from the left-side menu.

    Enter the Google DNS addresses (or other open DNS you want) in the “Servers” field (46) and check the “Allow Remote Requests” checkbox (47).

    Click on “Apply” (48) to apply the changes and “OK” (49) to close this window.

15. To see if L2TP is accessible for your local network, click on “New Terminal” from the left-side menu and enter “ping 8.8.8.8 (or whatever is up) interface={PPP connection interface} src-address={local gateway}”.

    For example in our case it will be:
    ping 8.8.8.8 interface=SmartyDNS_L2TP src-address=192.168.88.1

Get a VPN Service now!

Try SmartyDNS for free for 3 days to unblock geo-restricted sites and secure your privacy.

Try For Free