Mikrotik Tutorial 43: Configuring OpenVPN in Mikrotik Router for Remote User

In this video I will show you how to configure OpenVPN in Mikrotik Router and how a remote user can login to head office VPN server and work from remote location. OpenVPN is just like other type of VPN service like PPTP, L2TP, SSTP. OpnVPN can be used for site to site VPN and also can be configured as VPN Server-Client model where remote user can access to head office network by connecting to VPN server. OpenVPN has complete security features so it is safer than other types of VPN. In this video we will see the OpenVPN server-client model where remote user connect to head office network by openVPN client software from Windows PC.

For PPTP and L2TP there are built-in VPN client apps available on Windows but for OpenVPN we have to use third party application.

OpenVPN server and client configuration requires SSL certificate for secure communication. MikroTik RouterOS version 6 gives ability to create, store and manage certificates in certificate store.

Check this video to configure OpenVPN server in mikrotik router in easy way.

---------------------------------------


Music Information:

[gakizaeloi]

Thank you so much Mr Techie, i ve tried this withs many sites but you you gave all necéssally details .

[Dazolers]

Thank you so much for the tutorial! I tried to watch other tutorial before and only you can get the OVPN server working Tysm!!

[CrixusxD]

Woow, this is what i was looking for!! Thanks

[bojank]

Hi! Excelent video. Helped me a lot. I was just wondering why you did not make client certificate trusted? Thx for the answer.

[XSFlanger]

Well made guide. Only one thing that's missing:
1) If you assign the same IP address to remote VPN client as on LAN, you have to enable proxy-arp on your LAN's L3 interface. Otherwise it won't be able to receive direct ARP broadcasts and you won't be able to access anything.

[enzo_iwdmh]

Thank you very much for sharing this video!
I would like to know the proper config for a TAP connection instead of the usual TUN one.
Thank you very much for any help.
Regards
Enzo

[mohammadosmangoni]

What does CRL (Like CRL Sign or CA CRL Host) mean in Open VPN server?

[gmg]

Hi I did successfully run all of this, connection is made and well done but why i cant remote desktop to another computer? do you think this is related to my firewall rules? should i make exemption to port and remote IP address?

[kcharan]

Hello bro, the VPN is working, but how could you include the default gateway? for example once the vpn is connected it is not sending all traffic to my router.

[rnsantana]

EXCELLENT VIDEO, ONLY LEFT THE CONFIGURATION FILE AND SCRIPT

[conterstrauk]

in the "CA CRL Host" i need to create one Address for ovpn or i need to use my public ip?

[ajlauron]

How to make it authenticate using the radius server? I already have the radius server ready. thanks!

[DosMakis]

I would like to create a Vpn that i can use 2 mikrotik routers and connect with TAP instead with TUN so my multicast stream can go across, i that possible with mikotik ? thanks in advance

[jianxianglin]

Thank you the video, and i did as your video . but it can't work on my side . because i have no ipv4 public add but ipv6 . I set the server in my synology NAS and it work good . I don't know why it can't work on Router OS . Can you tell me that this ovpn can work with ipv6 on Router Os? thank you !

[junnel]

SIR QUESTION, can i connect to the router even if i am under a cgnat?

[marcioluercio]

Thank you for sharing your knowledge. I didn't find any client model for mobile. Could you help me?

[angelodawer]

how to use SSTP VPN to make troubleshoothing of services network of my infraestruture remotely

[jonwhite]

My laptop is running on Windows 7 and all i seem to be able to download is Openvpn Connect where you have to drag and drop the ovpn file into it which then gives me an error incorrect profile configeration Error Message ca.crt, client.crt, sectret

[spotfixke]

Hi, I would like to connect my mikrotik through API using OVPN, any help please

[monkeypunto]

Hi techie LAB, If I have dynamic public IP I can use the same configuration you use? only changing WAN IP Address for a Domain Name? Please your help.