Chapter 8 of 9 · MikroTik MTCNA
Tunnels
PPP profiles and secrets, IP pools, PPPoE on a local network, point-to-point addresses, and PPTP and SSTP tunnels.
- 4topics
- 21 minfast track
- 2diagrams and exhibits
Topics in this chapter
Take them in order, or jump to the one you need.
- 1PPP Profiles, Secrets, Status and Point-to-Point AddressesConfigure PPP profiles and secrets on RouterOS, read PPP status in the console, and understand the local and remote addresses of…5 min
- 2IP Pools, Ranges and Assigning Them to ServicesCreate RouterOS IP pools, manage their address ranges, and assign a pool to a service such as PPP profiles or a DHCP server to…5 min
- 3PPPoE, Securing the Local Network with a Client and a ServerSecure a local network with PPPoE on RouterOS, covering the PPPoE server, the PPPoE client, the service name and the PPP profile…Diagram5 min
- 4PPTP and SSTP Tunnels for Remote NetworksConnect remote networks securely with RouterOS PPTP client and server tunnels, the Quick Set VPN option, and SSTP clients that…Diagram6 min
About this chapter
What this chapter covers
Tunnels and PPP let a router authenticate users and join networks across an untrusted path.
The chapter starts with the PPP building blocks: profiles, secrets, status and the point-to-point addresses of a link. It then covers IP pools, which hand out addresses, and applies everything to PPPoE on a local network and to PPTP and SSTP across the Internet.
How the topics fit together
Every service in this chapter is built from the same few pieces.
A secret says who may log in. The profile says what settings that user gets, including the local and remote addresses of the link. The remote address can come from an IP pool, so that each client receives a free address automatically.
On top of these pieces you pick a transport. PPPoE runs over Ethernet on one segment, and it adds a login to a local network. PPTP and SSTP run over IP, so they connect remote sites over the Internet.
The ideas to carry between the pages are these:
- Settings on a secret override the profile.
- A PPP link has a local address and a remote address, and they need not share a subnet.
- A pool does nothing until a service refers to it.
- Routes are needed for any LAN that sits behind a client.
PPPoE needs a shared Layer 2 segment, while PPTP and SSTP only need IP reachability to the server.
How to use these pages
Each topic page has the same shape, so you can skim for what you need.
- What it is: the idea in plain words.
- How it works: the mechanism, with diagrams and console examples.
- What to remember for the exam: the facts to memorise.
- Common mistakes: the classic traps.
- Check yourself: three questions to test your understanding.
Read the pages in order, because the later ones reuse the secret, profile and pool from the earlier ones. A lab with two routers is enough to build a PPPoE link and then a tunnel.
Ready for more practice?
The full MikroTik MTCNA question bank has 558 questions, with timed practice exams and an explanation for every answer.
This study guide is independent and is not affiliated with, endorsed by, or sponsored by MikroTik. Vendor names, certification names and exam codes are trademarks of their respective owners and are used for identification only.