Ovpn Over Mikrotik Windows

Mikrotik OpenVPN Server Configuration

Mikrotik OpenVPN Server Configuration: 

Import the ovpn root ca, server certificate and key.

•  Connect to the Mikrotik using Winbox. Goto the Files,there you will find all the files, that you have copied from Linux server:

• Then goto the System —> Certificates:

• Click on Import Button, then select the ca certificate file (in my case, it is ca.crt) and press Import:

Double click on the imported certificate and change its name (This step is optional):

Once again,click on Import Button, then select the server certificate file (in my case, it is mikrotik.crt) and pressImport:

Next, import the server key using the above step:

Double click on the imported server certificate and change its name (This step is optional):

Once you have imported the private key, the server certificate will get the “KR” written in-front of it:

K: Decrypted-Private-Key R: RSA

Create the IP Pool for the openvpn client.

•  Goto the IP—->Pool:

• Create each pool of /30 subnet:

(Reason to create the /30 subnet is that, I am getting the below mentioned error on Windows machine, and that trick work for me)

There is a problem in your selection of --ifconfig endpoints [local=172.25.10.2, remote=172.25.10.1]. The local and remote VPN endpoints must exist within the same 255.255.255.252 subnet. This is a limitation of --dev tun when used with the TAP-WIN32 driver. Try 'openvpn --show-valid-subnets' option for more info.

Create as many pool as you have openvpn clients:

Give in the name of the immediately next pool name in the “Next Pool” field:

Create the profile for openvpn clients

• Selecting “Profiles” tab and click on + button:

Create user for openvpn client

• Move over to the Secrets tab and click on the + button to create user for openvpn client:

Enable OpenVpn service

• Enable OpenVPN Service and Select Valid Certificate by moving to the Interface take and click on “OVPN Server“:

Windows as OpenVPN Client installation & Configuration:

Download free OpenVPN client for windows from here, and install it. Once it’s installed, move to the openvpn directory(C:\Program Files\OpenVPN\config):

Download the sample configuration file from here. Modify it as per your requirement:

Create the auth.cfg file inside the C:\Program Files\OpenVPN\config folder, with the openvpn username and password that you have created on mikrotik server:

Run the OpenVPN client with Administrator privileges:

Right click on the openvpn icon at System Tray and click on “Connect“:

Once, it will be connected, will show you the similar detail:

Check the Routing Table:

route PTINT -4

Ping to the internal host:

Success :-)

Hope this will help you!

Please Remember me in your prayers!