1.

SERVIDOR PPPoE EN MIKROTIK

SI EL SERVICIO SE OFRECE A TRAVÉS DE UNA VLAN, se debe cambiar la interfaz a la VLAN
correspondiente. (Ver apartado para VLAN, PARTE 3)
a. Asignar direcciones
IP POOL: Direcciones utilizadas para la interfaz PPPOE

Resultado: Pool “pool1”

Las direcciones serán las asignadas a través del servidor PPPoE (10.10.10.2 – 10.10.10.254)
 b. Configurar interfaz para el servidor. Si se ofrece por una interfaz, ésta no puede estar
en el switch, ya que el servidor debe usar un circuito independente.
Opción 1 (Obsoleta): La opción “Interfaces”, la interfaz elegida no debe tener “Master Port”

Opción 2: Si no está disponible “master port” esta opción hay que hacer dos pasos en el
menú “bridge”

1. Crear un bridge con la opción “proxy-arp”

 2. Asignar la interfaz al “bridge” (BridgePorts)

c. C. Configuración del servicio PPPoE

Añadir “Perfil” en PPP  “Profiles” para asignar direcciones a los clientes, el DNS puede ser
cualquier DNS válido:
Añadir “Servicio” (Se crea deshabilitado, y hay que habilitarlo):

En el menú “PPOE Servers”, en el ejemplo se asigna a la interfaz “ether4”, que no debe tener
“master port”. Se asigna al perfil “profile1”. Los métodos de autentificación aceptados se
eligen aquí. Hay que tener en cuenta que “pap” no tiene seguridad:

(Opción 1: Obsoleta)

Si se asigna la interfaz a un bridge, queda así:

(Opción 2)
Añadir “Secreto”, se asigna un “secreto” por usuario, aunque cada usuario admite múltiples
conexiones. Se asigna al perfil “profile1”
 2. Pruebas
Configuración de la interfaz de Windows para que se conecte al “mikrotik” por PPPoE:
Configuración de acceso telefónico en Windows. (Conectar estación a eth5)

Estado de la conexión de Windows:

Configuración de la interfaz de un router para que se conecte al “mikrotik” por la interfaz
eth4 por PPPoE:

3. CONFIGURACIÓN CUANDO EL DERVICIO SE OFRECE POR UN PUERTO CON VLAN

MARCADA (TRUNK):
Se debe de dar de alta la VLAN con la ID seleccionada, el puerto ETH 4 se convierte en un
puerto TRUNK:
Físicamente el cable se conecta al puerto Ethernet 4. Pero usa la VLAN 6. Eso significa que el
cliente debe conectarse a través de dicha VLAN.
ANEXO
Manual original de MIKROTIK:
Creating a pppoe server

Steps Required to Setup Mikrotik RouterOS as an PPPoE Server

Step 1: Configuring IP Addresses of Interface connected to Local Ntework and WAN

(ISP/Fiber/DSL) ether1 (Connected to WAN with ip=192.168.1.20/24) ether2 (connected to
LAN with ip=172.16.100.100/24)
Step 2: Setting up MTR as a DNS Server.
Step 3: Setting up MTR as a DHCP Server.
Step 4: Creating IP-Pools for PPPoE Server use.
Step 5: Setting up PPPoE Server.
Step 6: Creating Profiles for PPPoE Server, that will use IP- Pools created earliest.
Step 7: Creating Profiles for PPPoE Server, that wlil use IP- Pools created earlier.
Step 8: Creating Default Route for Internet Traffic.

Process

Installing Mikrotik RouterOS is quite simple, just download the latest version
from http://www.mikrotik.com and burn it on CD. its an ISO base image file, so you may be
need NERO or any cd burning application. Boot from the CD and you will be prompted to
choose options what to select, just makr tick on everything, and press 'i' to install it,
WARNING !!! MTR installation will erase all prtitions on your Harddisk and format it. you dont
have any partition selection option, so Better be carefull. It will only few minutes , and then it
will restart. After booting the MTR OS, it will ask you to enter Admin id and pass. The first
default id password is
id = admin pass = (No password, just hit ENTER)
Later on, you can change it by entring:

/password

Now lets setup Basic Interface configuration:

You can see interface config by typing:

ip address print

Now we will first configure WAN ethernet:

ip address add address=192.168.1.20/24 broadcast=192.168.1.255 interface=ether1

Now we will configure LAN ethernet:

 ip address add address=172.16.100.100/24 broadcast=172.16.100.255 interface=ether2

Now we will set Primary DNS so we can resolve internet addresses:

ip dns set primary-dns=192.168.1.1 allow-remote-requests=yes

(Note: Replace 192.168.1.1 with your isp DNS server Ip.)

Now we will setup MTR as a DHCP Server which will handout ip's to LAN users so they can
connect with the MTR to establish PPPoE connection:

ip pool add name=DHCP ranges=172.16.100.10-172.16.100.100

ip dhcp-server add name=DHCP-Main add-arp=yes disabled=no interface=ether2 address-
pool=DHCP

Creating IP-Pools which PPPoE server will hand out to users when they establish PPPoE
Connectivity with the Server:

ip pool add name=pppoe-pool ranges=10.10.10.10-10.10.10.100

Setting up PPPoE Server (interface MUST not have a master port):

interface pppoe-server server add interface=ether2 max-mtu=1488 max-mru=1488

keepalive-timeout=disabled one-session-per-host=yes max-sessions=0 default-
profile=default authentication=pap disabled=no

Creating profiles for PPPoE Server, that will use ip-pools created earlier:

ppp profile add name=pppoe-profile local-address=10.10.10.1 remote-address=pppoe-

pool dns-server=10.10.10.1 rate-limit=128k/128k

Creating Firewall/Masquerade rules to allow PPPoE client to access Internet:

ip firewall nat add chain=srcnat src-address-list=10.10.10.0/24 action=masquerade

Setting Default Route for internet Traffic:

ip route add dst-address=0.0.0.0/0 gateway=192.168.1.1

Now create a test user which will use the profile created earlier.

ppp secret add name=test password=test profile=pppoe-profile

PPPoE Server Setup Done :), now test it on any winXP machine by creating a PPPoE Dialer.

[Note: MTR PPPoE Server , Text format howto derived from Mr.Mudassir's
[cool_murasir@hotmail.com PPPoE CBT from http://www.diglinux.com/videos/Mikrotik-
PPPOE-Server.avi ]

PPPoE Client Dialer:

Create a PPPoE client connection:

You can install the PPPoE client just like you install any other dial-up networking connection.
To create a PPPoE client connection, follow these steps:
1. Click Start, click Control Panel, and then double-click Network and Internet Connections.
2. Click Network Connections, and then click Create a new connection in the Network Tasks
pane.
3. After the Network Connection Wizard starts, click Next.
4. Click Connect to the Internet, and then click Next.
5. Click Set up my connection manually, and then click Next.
6. Click either Connect using a broadband connection that requires a user name and password
or Connect using a broadband connection that is always on.
7. Type the Internet service provider (ISP) name that your ISP provided, and then click Next.
8. Type the user name that the ISP provided.
9. Type the password that the ISP provided.
10. Type the password one more time to confirm it, and then click Next.
11. Click Add a shortcut to this connection to my desktop.
12. Click Finish to complete the wizard.