🐱‍💻MikroTik NordVPN Setup

Hello and welcome! This video covers the basics on how to configure a VPN tunnel towards NordVPN which hides your IP address, secures your browsing and gives you access to more content on services such as Netflix! Enjoy!

Support the Channel:

Social Media:

MTCNA Playlist:

Timestamps:
00:00 - Introduction
00:25 - VPN Theory
05:31 - VPN Setup

Credits:

Thumbnail: Created on Canva
Intro: Created on Canva

Thanks again for watching

[TheNetworkBerg]

MikroTik TOC docucmentation:


Steps to setup VPN tunnel:

Install Security Certificate

/certificate import file-name=root.der

Find NordVPN servers


Configure IKE2 Tunnel

/ip ipsec mode-config
add name=NordVPN responder=no
/ip ipsec policy group
add name=NordVPN
/ip ipsec profile
add name=NordVPN
/ip ipsec peer
add address=uk2065.nordvpn.com exchange-mode=ike2 name=NordVPN profile=NordVPN
/ip ipsec proposal
add name=NordVPN pfs-group=none
/ip ipsec identity
add auth-method=eap certificate="" eap-methods=eap-mschapv2 generate-policy=port-strict mode-config=NordVPN password=YOURPASSWORD peer=NordVPN policy-template-group=NordVPN username=YOURUSERNAME
/ip ipsec policy
add dst-address=0.0.0.0/0 group=NordVPN src-address=0.0.0.0/0 template=yes

Configure Sources to leave via IPSEC

/ip firewall address-list
add address=YOURNETWORKS list=NordVPN-Local

If you encounter strange ICMP issues from devices like TVs/Playstations try creating an additional policy with your LAN subnet
Make sure this is below your default policy, but above dynamiclly created policies

/ip ipsec policy
add action=none dst-address=YOURNETWORK src-address=0.0.0.0/0

[blindside]

You’re videos are incredibly high quality. Content is presented in such a professional way. I haven’t finished your MTCNA list of videos, but each of them so far have been fun to watch and learn alongside. Thank you for taking us on this journey with you! Keep of the great work hope you have a nice day.

[totemimaging]

Fantastic - this is exactly what was needed! Your walkthrough is so well done and consequently very easy to follow. Thanks a lot!

[ghailenbenothman]

Thank you soo much for the video. its exactly what somany new Mikrotik users needed.
One quick question most of uare still having very slow or unstable connection with the VPN connection. Fasttrack disabling didn't do much. can you make a short video showing us what can be done in this case please. Thank you :)

[heinkruger]

Thanks dude! Altyd lekker om n Suid Afrikaanse stem op youtube tevind!

[ThePROJECTKB]

Thank you - Where would i put the dedicated IP?

[willberry]

Great video. I got near the end and when adding the identity for nordvpn, it did not allow me to add the ipsec identity. The message also states username not set. Any ideas how to get passed this?

[tibuuso]

We need your tutorial on NordLynx using Mikrotik

[juraj.karoly]

Hello Network Berk, it would be helpful for me, if I know what is the configuration of the Mikrotik device when you start configuring the NordVPN (5:31). Is it the default Mikrotik configuration? Like if I would reset my Mikrotik (RB951G-2HnD)? Thanks.

[MauriF]

You’re the number 1!! Thank You very much!!

[NikolaMcluhan]

Thanks for this video ! However even through everything is setup, and the tunnel is active, and all FW default rules have been disabled - i am still getting my normal IP - i am using a bridge (my second router is my main router, this one is only for VPN setup) - could this be an issue? If not, is there a way to send you the config or logs to assist? Thanks a lot !

[bartellemy]

Nice vid, informative, need to also hop your dns onto VPN too tho

[josepharueyingho]

sir, I follow all your instructions but noticed that on the active peer, mine keeps going off and on, what could be the cause?

[lediopretusha]

Hey man. I followed you tutorial but at the part when you cut the video I have a problem. Can you give me an advise on what to do?

[TechnoDoggy]

Would be cool if NordVPN allows for the Wireguard protocol to connect like this

[crashburn]

just want to know if i should still add the NordVPN root certificate and where, as they state to import it via terminal.

[adeem.mughal]

Hi. I'm new with Mikrotik Device. I have recently configured Mikrotik 750GR3 and have successfully configured PPPOE. Everything is working good and we have also assigned users with their speed limits which is working fine. Now the problem is, when we connect with NordVPN or any third party VPN, the Dialup connection gets disconnected and there isn't any internet on the PC. Again we have to connect the Dialup connection and second time the connection is established, VPN connected but no Internet connectivity (no browsing). Can you please help me out? On Wifi, users are using NordVPN without any issue.

[KDANSO-sxhr]

Getting winbox error couldn't add new IPsec identity. username not set (6).. any help

[Sam-uru]

I find that when vpn is not connected, local isp route is used instead - how to restrict that only nordvpn connection is used to supply internet and when that is not connected (NordVPN) no internet is offered to devices

[anvara.]

I did everything like you mentioned. But I am not able to connect and I am not seeing active peers.