MikroTik OpenVPN Server Configuration with Windows Client

[@georgiosstratigos4334]

FYI : i followed the subject instructions also for site to site openvpn (between 2 mikrotik routers)and working great . congrats for the clear instructions

[@ManueleFiorenza]

Mikrotik nat firewall configuration and port forwarding are missing

[@onilsonoliveira7943]

When you create the certifying authority uses the public ip or gateway router ? I did as I taught,but gave error here. error:Tue May 26 22:21:52 2020 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) Tue May 26 22:21:52 2020 TLS Error: TLS handshake failed Tue May 26 22:21:52 2020 Fatal TLS error (check_tls_errors_co), restarting

[@bluewhales47]

is this still need IP Public on Server OpenVPN side ? what if mikrouik router side dosn't have IP Public from ISP, how to connect workstation client as a part of the Mikrotik Network, thanks 🙏

[@qabparts]

i did the 2 mikrotik routers connect via OpenVPN site to site, how can i connect a remote computer to connect to the network?

[@zaroqe]

Thank you! Your video is very clear and precise. I managed to setup vpn for my office.

[@ThePatsev]

I have no internet connection after configuring ovpn with those steps. Any ideas where I went wrong?

[@JVBoy]

what model of mikrotik?

[@mujeebmujeeb2393]

What if we don't have public static IP address on Wan Or our mikrotik Wan behind NAT . Can we do same process .

[@rudythang3582]

after follow all step Mon Jul 16 11:23:43 2018 us=793415 disabling NCP mode (--ncp-disable) because not in P2MP client or server mode Options error: On Windows, --ifconfig is required when --dev tun is used Use --help for more information.

[@gtraveltech]

have you solved?

[@rubenkuh8853]

thank you! It has been very easy to understand because of the way you did it

[@tarzan-wo9xs]

how to create ovpn config file sir.

[@uacagile8998]

Is there any chance to take the printout from remote Server to VPN client machine?

[@ionut2219]

Very nice and useful tutorials. Keep up the good work!

[@yangchongtan2424]

Bro your video really easy understand, thanks for your sharing and now i can setup my VPN easily.

[@ahsanashraf5887]

Hi sir thanks for this awesome video Sir I I have some issue with this I do each single step and follow you But when I connect openvpn client through same network from windows that connection succeed but When I'm trying to connect from outside network the VPN not connecting please help

[@ButcherUA]

Thank you BRO !!! Your video manual best :)))

[@mujeebmujeeb2393]

I don't have public IP on mikrotik or not port forwarding facility at wan Can I do this without having public IP on mikrotik

[@mrvlog4573]

i have a question sir

[@HenningMackszomotto]

Only you to save me!!! very thanks!!!

[@maspurmikrotiker8476]

how to make a client.key file?

[@atefali977]

Thank you so much for sharing!! I'm able to connect from my client to the OpenVPN server. However, when I check the WAN IP of my client, it is still showing me the IP of the public network that I'm behind and NOT the IP of the OpenVPN server. Any thoughts? Thank you.

[@ravinderrajput7456]

What setting needs to be done so that the the vpn client runs the internet through the vpn server

[@celso.vss86]

At 6:20 am the MAC address is that of the server?

[@Bingbangbo3246]

Thanks, it works, the bad thing was that Verify Client Certificate doesn't work.

[@SystemZone]

It should work. Specify CA and Client Certificate properly in client configuration file. Also you can follow this article: systemzone.net/mikrotik-openvpn-configuration-on-tcp-port-443-with-windows-os/

[@danielbaraza154]

Great!!! Thank you for the video

[@TrueNetworking]

Do any of the routers require public ip?

[@LamNguyen-vu5qb]

Tks your video. I have a question "Where did you get client.ovpn file??".

[@SystemZone]

you will find client.ovpn in this article systemzone.net/mikrotik-openvpn-setup-with-windows-client/

[@LamNguyen-vu5qb]

you can fix error for me, please :(

[@techsupport6495]

for this can i need static ip on both sides

[@SystemZone]

No, only server need static IP

[@techsupport6495]

@@SystemZone thanks for your reply, can i get your skype id or whatsapp Number ?

[@luxli7643]

Hi, many Thanks. Could this VPN client out to the gateway your remotely routers (OVPN Server Mikrotik)? I would be on internet via OVPN server.

[@luxli7643]

I found the solution.I must put in config file this command "redirect-gateway autolocal" and all my traffic is now going through a remote OVPN server.Thanks

[@LokeshKumarJ-qn4bq]

@@luxli7643 In Which Line i have to add ???

[@luxli7643]

Hi @@LokeshKumarJ-qn4bq in client.ovpn file. Below i paste content of my ovpn config file. client dev tun redirect-gateway autolocal proto tcp-client remote xxx.xxx.253.77 port 5002 nobind persist-key persist-tun tls-client remote-cert-tls server ca ca.crt cert client.crt key client.key verb 4 mute 10 cipher AES-256-CBC auth sha1 auth-user-pass user.pass auth-nocache Best regards

[@ionutc.3657]

@@luxli7643 Thank you! I was seeking 2 days for this solution :)

[@jako265]

Hello friend, it works great!!!! Please tell me can i use the same keys to other miktotik so from client side i have only a pair of certificates??

[@LokeshKumarJ-qn4bq]

Thank you so much !!! You made my day !!! Works like a charm :-)

[@playerfun2344]

Hi sir, I have one question, from VPN i can access all pc from lan, but from LAN i can not access any client from VPN, what's wrong ?

[@bradpitt1415]

I live in Suzhou next to Shanghai. At first, I used IKEV2 VPN, but it didn't work well, so I'm currently using Panda VPN's stealth method. I am using it to my satisfaction. If v2 does not work, try steerlh. Openvpn = Stealth

[@jagilren]

Phenomenal. Thanks...

[@SpiritOfFire73]

what if I don't fill in 'CA CRL HOST' while I make ' Certificates'? can it work?

[@sollekram]

for accessing it across the Internet?

[@SystemZone]

yes bro.

[@sollekram]

@@SystemZone I should port forward the external ip(of the mikrotik)on the modem?

[@JorgeLuisKrauss]

Hi, I can't make it work... I have a mikrotik router on my work, and because of covid-19 we are trying to set up open-vpn connections. I've followed you step-by-step, replacing the IP's with mine, but after writing down my password I get the "TCP: connect to [AF_INET]MyIP:PORT failed, will try again in 5 seconds" error... I've tryed setting off my windows fw... nothing...

[@SystemZone]

Follow this article step by step: systemzone.net/mikrotik-openvpn-configuration-on-tcp-port-443-with-windows-os/

[@mujeebmujeeb2393]

Thanks

[@ahsanashraf5887]

Very good

[@mikaeladingra4238]

Hello Grand Chief, I need your help. I would like to access the internet remotely via my mikrotik router which is at home via a VPN connection. is it possible to become an internet access provider via VPN PPTP ?? STP answer me

[@LokeshKumarJ-qn4bq]

Everything is working fine. The client receives the IP from the router but it is not assigning the gateway. Even in this tutorial gateway is empty

[@tomiyalima]

Gracias, de verdad gracias!!!

[@guarinoantoniohernandezmar6300]

1000000000000% working thanks

[@ajudanet8005]

does it work with dynamic ip addr (at the wwan)??

[@SystemZone]

No, for all vpn you should have static public IP on WAN interface.

[@PabloOlivare]

where do you get ovpn file?

[@flamaryonklever]

Só criar um arquivo no bloco de notas igual ao dele e renomear para client.ovpn

[@rz6354]

again as with all other instructions - access from VPN to LAN does not work - how to make LAN accessible to clients from VPN ?? 🤷‍♂

[@CesarDanielLopez]

hi!, it's a great tutorial, the conecction to mikrotik works fine, but.. i need hel to reach the machines on my internal lan. can you help me please?

[@jggallas]

You need to add an internal route in every machine, something like "route add vpnLanAddress mask netmask mikrotikLanAddress -p" "route add 10.10.1.0 mask 255.255.255.0 192.168.1.254 -p" this example work for windows

[@roquerivera8601]

Where did you get the Key file?

[@mochodog]

after exporting the CA the returns to make the export of CA but this time add a key of this is the key file. do not skip the steps ;D

[@roquerivera8601]

I am trying to see the key export in your video but cannot find it. Can you please tell me where in the video is?

[@SystemZone]

In step 2, at the time of exporting CA certificate, the key file is generated by MikroTik. Follow this article to get detail: systemzone.net/mikrotik-openvpn-setup-with-windows-client

[@asylochogo1961]

Your steps are okay. Is it possible you speak while presenting. Consider that in your next presentation.

[@Garethuk2006]

thank you so much :)

[@kennethpressley3399]

I'm unable to config mine. I use to cofigure netgear router. Mikrotik is different. I'm not an informatician

[@ibrahim.abdiyev]

THX very much

[@alshaladear9346]

thank you but no G.Wy

[@jonancar]

No funciona

[@alishahzadification]

Pagal bana raha hai bhai, whatsmyip kar k dekha kon sa ip address milta hai tujhe, tujhe wohi ip address milay ga jo tere system ka hai na k mikrotik router k WAN ka . i need non-split tunneling rather than split tunneling.

[@Thee.Mighty]

clicker