Which statement describes configuring a PPTP VPN server and a client on MikroTik (noting security concerns)?

Which statement describes configuring a PPTP VPN server and a client on MikroTik (noting security concerns)?

• A. PPTP is deprecated; if used, create a PPP secret with service=pptp and enable the PPTP server, and for the client use /interface pptp-client add connect-to=HOST user=user password=pass; /ppp secret add name=user password=pass service=pptp
• B. Use L2TP/IPsec instead
• C. PPTP server requires no PPP secrets
• D. Use PPTP client only

Answer: (A)

Setting up a PPTP VPN on MikroTik centers on enabling the PPTP server, defining a user credential (PPP secret) for PPTP authentication, and then configuring a PPTP client that uses those credentials to connect to the server. On the server side, you need to turn the PPTP server on and create a user secret that specifies the service as PPTP. This ties the user to PPTP authentication. On the client side, you configure a PPTP interface that connects to the server’s address using the same user name and password. The commands reflect this exact setup: enable the PPTP server, create a PPP secret with service=pptp, and add a PPTP client with the connect-to host and the matching credentials. However, be aware that PPTP has known security weaknesses. Its encryption and authentication mechanisms are considered outdated and vulnerable to modern attacks. For stronger security, prefer L2TP/IPsec, SSTP, OpenVPN, or WireGuard when possible. If PPTP must be used, take additional precautions such as limiting exposure, using strong passwords, and applying strict firewall rules. This approach directly illustrates how to configure both sides for PPTP on MikroTik, which is why it’s the best answer for describing the setup.

Setting up a PPTP VPN on MikroTik centers on enabling the PPTP server, defining a user credential (PPP secret) for PPTP authentication, and then configuring a PPTP client that uses those credentials to connect to the server.

On the server side, you need to turn the PPTP server on and create a user secret that specifies the service as PPTP. This ties the user to PPTP authentication. On the client side, you configure a PPTP interface that connects to the server’s address using the same user name and password. The commands reflect this exact setup: enable the PPTP server, create a PPP secret with service=pptp, and add a PPTP client with the connect-to host and the matching credentials.

However, be aware that PPTP has known security weaknesses. Its encryption and authentication mechanisms are considered outdated and vulnerable to modern attacks. For stronger security, prefer L2TP/IPsec, SSTP, OpenVPN, or WireGuard when possible. If PPTP must be used, take additional precautions such as limiting exposure, using strong passwords, and applying strict firewall rules.

This approach directly illustrates how to configure both sides for PPTP on MikroTik, which is why it’s the best answer for describing the setup.