MikroTik's pppoe implementation supports encryption yes. However I have seen many different broadband routers that do not support encryption however WinXP and raspppoe can give you encryption with MikroTik for sure. Not tested any other software models yet.
Best regards, Eje Gustafsson mailto:[EMAIL PROTECTED] The Family Entertainment Network http://www.fament.com Phone : 620-231-7777 Fax : 620-231-4066 - Your Full Time Professionals - eBay UserID : macahan --- searchable smartBridges mailing list archive. http://www.mail-archive.com/smartbridges40part-15.org/ -- R> RE: [smartBridges] Microtik - EjeDoes pppoe include encryption? R> Ray R> ----- Original Message ----- R> From: Kevin Summers R> To: [EMAIL PROTECTED] R> Sent: Monday, August 18, 2003 1:23 PM R> Subject: RE: [smartBridges] Microtik - Eje R> In Windows 98SE run Add/Remove programs and go to R> the Windows Components part. In Communications, make R> sure that Virtual Private Networking is installed. R> In Windows 2000/XP right click on My Network Places and R> go to Properties. Double-click on Make New Connection and R> choose "Connect to a Private Network through the Internet". R> This lets you set up PPTP for your clients to connect to your R> MikroTik router with a secure login. It's built in to every version R> of Windows that is 98SE or newer, and can be added on to R> 98 and 95 by downloading the updated DUN (Dialup Networking) R> from Microsoft. R> The client machine picks up a DHCP address, you have their R> PPTP configured to connect to your MikroTik router, and they R> use their Username and Password to log in. Your MikroTik should R> be configured so that it Mangles packets coming from authenticated R> users, and flow-marks them as authorized. Then in your Forward firewall R> rules you can allow and disallow the appropriate ports and stuff for those R> users. In the PPP configuration section it works the same as PPPoE R> and can be authenticated through RADIUS. R> We're actually running HotSpot, PPTP and PPPoE all through RADIUS R> on the same MikroTik server and we love the versatility of this software. R> Kevin Summers R> KISTech Internet Services Inc. R> www.kistech.com R> -----Original Message----- R> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Chris Chance R> Sent: Monday, August 18, 2003 1:10 PM R> To: '[EMAIL PROTECTED]' R> Subject: RE: [smartBridges] Microtik - Eje R> Clerify what exactly is PPTP and how does it work? R> -----Original Message----- R> From: Kevin Summers [mailto:[EMAIL PROTECTED] R> Sent: Monday, August 18, 2003 3:38 PM R> To: [EMAIL PROTECTED] R> Actually, PPTP on the MikroTik router DOES work with R> RADIUS. It's all authenticated through the PPP menu R> options so RADIUS is available for PPTP, PPPoE and R> any other service that runs it's authentication through R> the PPP portion of the router, and it is dynamic. R> NOTE: I'm using version 2.7 R> Kevin Summers R> KISTech Internet Services Inc. R> www.kistech.com R> > -----Original Message----- R> > From: [EMAIL PROTECTED] R> > [mailto:[EMAIL PROTECTED] Behalf Of Eje Gustafsson R> > Sent: Saturday, August 16, 2003 9:47 PM R> > To: Kevin Summers R> > Subject: Re: [smartBridges] Microtik - Eje R> > R> > R> > I seen single port routers capable of pppoe that been sold for as R> > little as 6.95 (tigerdirect.com - efficient (siemens) routers). R> > R> > Yes Mikrotik can do pptp however it is not dynamic you have to create R> > a pptp interface for each client and it do not support radius which R> > are two things that are very strong things speaking for pppoe. You R> > know one thing that is kind of funny years back when I looked at doing R> > dsl I did NOT want to do pppoe. If you had asked me I would have said R> > it plainly sucked bulky messy and I would give you every possible R> > excuse not to use it. Today I would never dream about running a R> > 802.11b network without it [pppoe] or some sort of hotspot R> > authentication. Why ? Because 802.11b is to easy to hack into and gain R> > access to and the ONLY way to securely protect you is pppoe or second R> > best hotspot. R> > R> > Best regards, R> > Eje Gustafsson mailto:[EMAIL PROTECTED] R> > The Family Entertainment Network http://www.fament.com R> > Phone : 620-231-7777 Fax : 620-231-4066 R> > - Your Full Time Professionals - R> > eBay UserID : macahan R> > --- R> > searchable smartBridges mailing list archive. R> > http://www.mail-archive.com/smartbridges40part-15.org/ R> > -- R> > KS> RE: [smartBridges] Microtik - EjeIf they are Windows clients, R> > use PPTP for R> > KS> authentication. The same R> > KS> features are available for bandwidth limiting, and anything that is R> > KS> Windows 98SE or newer has PPTP support built in. It only works for R> > KS> single users, but if that is what you have, then you are set. R> > For those R> > KS> that are multiple machines behind a CPE you can get the router and R> > KS> spend the $9.99 on them. R> > R> > KS> The "redirect page" feature I think you are referring to is R> > the HotSpot R> > KS> feature. It works very slick and doesn't require any configuration on R> > KS> the client machine. It also works with multiple clients behind a CPE. R> > KS> Kevin Summers R> > KS> KISTech Internet Services Inc. R> > KS> www.kistech.com R> > R> > R> > R> > KS> -----Original Message----- R> > KS> From: [EMAIL PROTECTED] R> > KS> [mailto:[EMAIL PROTECTED] Behalf Of Chris Chance R> > KS> Sent: Saturday, August 16, 2003 8:05 AM R> > KS> To: '[EMAIL PROTECTED]' R> > KS> Subject: RE: [smartBridges] Microtik - Eje R> > R> > R> > KS> I know really it's a matter of cost the PPPoE solution is R> > thebest along R> > KS> with using routers at the clients but so far cheapest I have R> > found is 9.99 R> > KS> sounds great but its 49.99 with a 40 dollar mail in rebate R> > that's not a R> > KS> possibility considering my bank account doesn't come close to R> > covering the R> > KS> 150 clients that would need the routers rolling trucks isn't even the R> > KS> problem cause I could get my friends to do it with me. How do R> > I set the R> > KS> queue tree for port's? for the overrides I couldn't find R> > this? Can you give R> > KS> me a basic setup for what I would have to do from a bare R> > 2.7.8 microtik box R> > KS> to get 1 client up at 512/128 with pop and smtp overridden to R> > do unlimited R> > KS> along with the ARP authorization. I would really appreciate R> > it eje, things R> > KS> might just be promising then even though I can't get the R> > redirection page to R> > KS> work that's one feature I wish the microtik had then I could R> > really pump it R> > KS> are they taking any recommendations ? I mean the webserver is already R> > KS> implemented on the box so it shouldn't be that hard. R> > R> > KS> Chris R> > R> > KS> -----Original Message----- R> > KS> From: Eje Gustafsson [mailto:[EMAIL PROTECTED] R> > KS> Sent: Friday, August 15, 2003 12:18 AM R> > KS> To: Chris Chance R> > R> > KS> Currently you can only set a upload limit based on mac address. R> > KS> If you create static arp entries then they will not be able to pass R> > KS> any traffic even if they change ips. R> > R> > KS> Sounds like from what you want to do you need to setup a R> > queue tree as R> > KS> well create some override rules that would allow higher R> > speed on pop3 R> > KS> and smtp. R> > R> > KS> If you set the interface to arp reply-only then a unauthorized user R> > KS> will not be able to pass any traffic. There is no redirect page but R> > KS> then they will not be able to pass any traffic either R> > (which should be R> > KS> a good hint). R> > R> > KS> If you really want a secure network you should use pppoe R> > then you can R> > KS> have all automated for you and don't need to worry about users R> > KS> changing ips or unathorized users. PPPoE is your friend. R> > R> > R> > R> > KS> Best regards, R> > KS> Eje Gustafsson mailto:[EMAIL PROTECTED] R> > KS> The Family Entertainment Network http://www.fament.com R> > KS> Phone : 620-231-7777 Fax : 620-231-4066 R> > KS> - Your Full Time Professionals - R> > KS> eBay UserID : macahan R> > KS> --- R> > KS> searchable smartBridges mailing list archive. R> > KS> http://www.mail-archive.com/smartbridges40part-15.org/ R> > KS> -- R> > KS> CC> Eje I'm really considering the microtik for our client bandwidth R> > KS> management R> > KS> CC> until the nexus come out but I have a problem... I got R> > basic queues to R> > KS> work R> > KS> CC> by IP although this isn't what we wanted.. We wanted by R> > mac address R> > KS> CC> bandwidth management I mean people can change ips or R> > spoof ip's easier R> > KS> than R> > KS> CC> mac's, and also we wanted to be able to do more in R> > depth filtering of R> > KS> the R> > KS> CC> bandwidth for a client like 512/128 for everything R> > except smtp and R> > KS> pop3 R> > KS> CC> which would be unlimited. But this isn't available? R> > Also What happened R> > KS> to R> > KS> CC> what I heard about authorization redirection Mainly R> > showing users that R> > KS> CC> aren't mac allowed a webpage that states there invalid R> > users or are R> > KS> pirating R> > KS> CC> and should desist or call the office. R> > R> > R> > R> > KS> CC> Chris R> > R> > R> > R> > KS> PS>> Eje any help would be much appreciated or anyone using microtik R> > R> > KS> -- R> > KS> [This E-mail scanned for viruses by Declude Virus] R> > R> > KS> The PART-15.ORG smartBridges Discussion List R> > KS> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe R> > KS> smartBridges <yournickname> R> > KS> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe R> > KS> smartBridges) R> > KS> Archives: http://archives.part-15.org R> > R> > -- R> > [This E-mail scanned for viruses by Declude Virus] R> > R> > The PART-15.ORG smartBridges Discussion List R> > To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe R> > smartBridges <yournickname> R> > To Remove: mailto:[EMAIL PROTECTED] (in the body type R> > unsubscribe smartBridges) R> > Archives: http://archives.part-15.org R> The PART-15.ORG smartBridges Discussion List R> To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> R> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) R> Archives: http://archives.part-15.org -- [This E-mail scanned for viruses by Declude Virus] The PART-15.ORG smartBridges Discussion List To Join: mailto:[EMAIL PROTECTED] (in the body type subscribe smartBridges <yournickname> To Remove: mailto:[EMAIL PROTECTED] (in the body type unsubscribe smartBridges) Archives: http://archives.part-15.org
