Please Note: Although technically you can use the L2TP / PPTP protocol, it has serious security flaws. Whenever possible, we recommend choosing OpenVPN or IKEv2/IPSec instead.

First things first, these changes are made in the web configuration panel of your router. You can access it by visiting the local IP of your router from your web browser. The two most common, default local IPs that most routers have are or – you can access these by opening or in your browser. The default IP, username and password are listed in your router’s User Manual.

Please note that PPTP is a very old VPN protocol, and is considered unsafe. Please use it at your own risk.

Here is how to to set up PPTP protocol on a Mikrotik router:

1. Create PPTP Client by clicking on PPP on the left side of your router’s interface;

2. Fill in this information:
• Name can be anything you like though I prefer it naming by the server name. For example US246_PPTP. Note that you will use this name in the other steps of VPN configuration;
• Type should be set to PPTP Client;
• Leave L2 MTU field blank;
• Set Max MTU and Max MRU to 1450.

3. Switch to the Dial Out tab and fill the information as follows:
• Into the Connect To field enter the server address you want to connect to. Our server list can be found here: https://nordvpn.com/servers/ ;
• The User and Password fields should contain your NordVPN username and password;
• Set the Profile to default -encryption;

4. Click Apply to connect to VPN. Once connected your status on the lower right corner of the window should say link established.


Next you need to set up firewall rules so that your internet traffic goes through PPTP tunnel:

5. Navigate to IP -> Firewall and select the tap named Mangle;

6. You now need to create a new prerouting rule and type VPN into the Src. Address List field from the Advanced tab;

7. In order to complete this rule set the Action to mark routing and set VPN as your New Routing Mark;

8. Enable Passthrough;

9. You should now move the rule to the top of your rule list;

10. Navigate to IP -> Routes and setup a new route:
• Dst. Address should be;
• For the Gateway select the PPTP connection name you have assigned in step 2;
• Use ping as a Check Gateway option;
• Switch type to unicast;
• Distance should be set to 1;
• Set Scope to 30;
• And Target Scope to 10;
• Change Routing Mark to VPN;

11. Now click on Apply and the gateway status from the second line should change to Reachable;


Next we will need to create a masquerade rule:

12. Go to IP -> Firewall and select the Nat option from there;

13. In the General tab set srcnat as a type of Chain and the PPTP connection name used in step 2 as Out Interface;

14. In the Action tab select masquerade;


The last thing you need to do is to apply the firewall rules you have created to your network:

15. Go to IP -> Firewall and select the Address Lists option this time;

16. Change the Name to VPN;

17. In the Address field you should enter the local IP address of the devices you want to secure with the VPN. Use if you want the VPN to work with all devices connected to the router.


Congratulations, your traffic should be going through NordVPN now!! You can visit www.whatismyipaddress.com to confirm the successful VPN connection.