All guides
PPTP

PPTP Client Setup

PPTP (Point-to-Point Tunneling Protocol) is the simplest protocol to configure. It has lower encryption but provides the fastest connection speeds.

Before You Start

  • You need a MikRouter remote account with an active subscription.
  • Open Winbox and connect to your MikroTik router via MAC or IP address.
  • Have the remote's Connect To, PPP Username and PPP Password ready — all three are on its page under your remotes in the dashboard.

The quickest way: paste one command

Open your remote in Remotes, press Copy on its Quick Setup section, then paste it into New Terminal in Winbox and press Enter. That is the whole setup.
MikroTik Terminal
:do {
  /interface pptp-client remove [find name="mikrouter-pptp"]
  /interface pptp-client add name=mikrouter-pptp connect-to=test.mikrouter.com user=user-pptp password=pass-pptp disabled=no
  :if ([:len [/interface pptp-client find name="mikrouter-pptp"]] > 0) do={
    :put "MikRouter: PPTP client mikrouter-pptp added successfully."
  } else={
    :put "MikRouter: ERROR - PPTP client mikrouter-pptp was not added."
  }
} on-error={
  :put "MikRouter: ERROR - could not add the PPTP client mikrouter-pptp. Check that this RouterOS supports PPTP and try again."
}

This script is only a sample — copy the real one from your Quick Setup section.

The terminal confirms it:

admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
Terminal✕
  MMM      MMM       KKK                            TTTTTTTTTTT      KKK
  MMMM    MMMM       KKK                            TTTTTTTTTTT      KKK
  MMM MMMM MMM  III  KKK  KKK  RRRRRR     OOOOOO        TTT     III  KKK  KKK
  MMM  MM  MMM  III  KKKKK     RRR  RRR  OOO  OOO       TTT     III  KKKKK
  MMM      MMM  III  KKK KKK   RRRRRR    OOO  OOO       TTT     III  KKK KKK
  MMM      MMM  III  KKK  KKK  RRR  RRR   OOOOOO        TTT     III  KKK  KKK

  MikroTik RouterOS 7.23.3 (c) 1999-2026       https://www.mikrotik.com/

Press F1 for help

[admin@hEX] >
MikRouter: PPTP client mikrouter-pptp added successfully.

[admin@hEX] >
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)

Prefer to set it up by hand? The steps below do the same thing in Winbox — two tabs and Apply. The values in the pictures are examples; use the Connect To, User and Password from your own remote's page.

1

Open PPP and press New

In Winbox, click PPP in the left menu. On the Interface tab press New and choose PPTP Client.
admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
PPP▾InterfacePPPoE ServersOVPN ServersSecretsProfilesActive ConnectionsL2TP EthernetL2TP Secrets✕
+New▶ Enable✗ Disable✕ Remove
Name ▴Type
PPP ServerPPP ClientPPTP Server BindingPPTP ClientSSTP Server BindingSSTP ClientL2TP Server BindingL2TP ClientOVPN Server BindingOVPN ClientPPPoE Server BindingPPPoE Client
0▶ Live
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)
2

Name it on the General tab

The new PPTP client window opens on the General tab. Give it any Name you like — it is only a label for this tunnel. Leave Enabled ticked and Max MTU and Max MRU at 1450; Type, Actual MTU and VRF are filled in for you.
admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
Interface › New…✕
GeneralDial OutStatusTraffic
Enabled✓
Comment
Namemikrouter-pptp
TypePPTP Client
Actual MTU
VRFmain⋮▾
Max MTU1450
Max MRU1450
MRRU+
Status: CancelApplyOK
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)
FieldValue
Namemikrouter-pptp
3

Fill in the Dial Out tab

Switch to Dial Out. Only three fields are yours to fill in — Connect To, User and Password. Every other field is a default and is already correct; if your Winbox shows something different, set it to match the picture below.
admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
Interface › New…✕
GeneralDial OutStatusTraffic
Connect Totest.mikrouter.com
Useruser-pptp
Passwordpass-pptp−
Profiledefault-encryption⋮▾
Keepalive Timeout60−
Use Peer DNSno▾
Dial On Demand
Add Default Route
Default Route Distance1
Allow✓ mschap2✓ mschap1✓ chap✓ pap
Status: CancelApplyOK
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)
FieldValue
Connect Totest.mikrouter.com
Useruser-pptp
Passwordpass-pptp
4

Press Apply and watch it connect

Click Apply. PPTP connects almost instantly — it has the least handshake of the four. The title takes the name you gave the interface, a green RUNNING badge appears in the bottom-left corner, the footer reads Status: connected, and Apply greys out. Then click OK to close the window.
admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
Interface › mikrouter-pptp✕
GeneralDial OutStatusTraffic
Connect Totest.mikrouter.com
Useruser-pptp
Passwordpass-pptp−
Profiledefault-encryption⋮▾
Keepalive Timeout60−
Use Peer DNSno▾
Dial On Demand
Add Default Route
Default Route Distance1
Allow✓ mschap2✓ mschap1✓ chap✓ pap
RUNNINGStatus: connectedCancelApplyOK
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)
5

Verify it in the interface list

Back in PPP›Interface the client is now listed with an R (Running) flag in the first column and a status of connected.
admin@192.168.88.1 (hEX) hEX WinBox
Workspace:<own> ▾
PPP▾InterfacePPPoE ServersOVPN ServersSecretsProfilesActive ConnectionsL2TP EthernetL2TP Secrets✕
+New▶ Enable✗ Disable✕ Remove
Name ▴TypeActual MTUL2 MTUStatus
Rmikrouter-pptpPPTP Client1500connected
1 item (1 selected)▶ Live
hEX 192.168.88.1 / mmips / hEX / 7.23.3 (stable)
6

Confirm it in your dashboard

Open the remote in Remotes. Within a few seconds the badge turns Online and a Live Connection section appears with the caller IP your router dialled in from — it only appears while the tunnel is up, so it is the confirmation that counts.
https://mikrouter.com/user/remotes/665…

MikroTik hEX

Online

4m22s

Remote is available

Expires on one week from today.

Live Connection

Caller IP

203.0.113.45

Location

🇵🇭 Manila, Philippines

ISP

Example Telecom

Organization

Example Telecom Inc.

VPN Credentials

Username

user-pptp

Password

•••••

Connect To

test.mikrouter.com

Assigned Port

12345

Password shared or exposed? Issue a new one for free. You will need to update the VPN client on your MikroTik afterwards.

Rotate Password
Remote URL

test.mikrouter.com:12345

Use this address to connect via Winbox, SSH, HTTP, or API.

Need a fresh port? Rotate to a new one for 2 credits. The current port stops working and is retired permanently.

Rotate Port
PPTP is the least secure of the four, and the most often blocked. It relies on GRE, which many carrier networks drop outright — common on mobile data. Use it only when SSTP, OVPN and L2TP are unavailable or blocked.