How to create VPN server on Mikrotik with OpenVPN ( Client to Site )

Поделиться
HTML-код
  • Опубликовано: 23 июл 2024
  • How to connect to your work network from outside the office
    In this short video, I suggest you a solution with the Mikrotik router
    Mikrotik RB2011UiAS-2HnD-IN amzn.to/3LZlXOv
    Desk Lamp, Black amzn.to/3s3wSyL
    Desk Lamp, Clamp amzn.to/47tNvnw
    Cofig file drive.google.com/file/d/1-JHx...
    ==========
    #Template client.ovpnclient
    dev tun
    proto tcp-client
    remote 123.25.70.1
    port 1194
    nobind
    persist-key
    persist-tun
    tls-client
    remote-cert-tls server
    ca ca.crt
    cert client.crt
    key client.key
    verb 4
    mute 10
    cipher AES-256-CBC
    auth SHA1
    auth-user-pass secret
    auth-nocache
    Thanks for watching, don't forget like and subscribe at goo.gl/LoatZE
    0:00 Introduction
    0:07 Generate Certificate
    2:16 Export and download your certificate
    3:27 Setup OpenVPN Server
    3:57 Create vpn user
    4:34 Enable proxy arp on the LAN interface
    4:49 5. Install openVPN Client on user device
    5:29 Copy your CA and client certificates and client key files into config directory
    5:50 Create Config File for openVPN Client
    7:01 Create a file named secret in config directory and specify username and password in this file
    7:37 Connecting OpenVPN Client
    Dream 600K Sub / netvn82
    #netvn #openvpn #mikrotik #mikrotikvpn
  • ХоббиХобби

Комментарии • 162

  • @milleroliveira7809
    @milleroliveira7809 2 года назад +5

    Simple and directed! Thanks man

  • @SamirNetCore
    @SamirNetCore 2 года назад +20

    Nice tutorial. I have only one issue with the new version of OpenVPN. OpenVPN always gave an error with the private key, I solved it by changing the line "cipher AES-256-CBC" to "data-ciphers AES-256-CBC" in the config file.

  • @JAM-bf7lc
    @JAM-bf7lc Год назад +1

    beautiful tutorial, thank you very much and thanks again for sharing your knowledge

    • @NETVN82
      @NETVN82  Год назад

      Thanks for watching!

  • @alexcruces8759
    @alexcruces8759 Год назад

    very very thanks, you are the best teacher on the world, I always see your videos and I've learned too much

    • @NETVN82
      @NETVN82  Год назад

      Glad to hear that!

  • @amirhosseinkhodami762
    @amirhosseinkhodami762 2 года назад +1

    Perfect! Thank you so much

  • @fabiowillian7785
    @fabiowillian7785 2 года назад +1

    thank you !! you are the number one!!

  • @nikitalopez1810
    @nikitalopez1810 2 года назад +1

    Thank you friend, you bring a lot of knowledge and super interesting tools, please you could create a video step by step configure hotspot internet sale by pins or voucher🙏

  • @Quettesh
    @Quettesh 10 месяцев назад +1

    What about default firewall rules (configured when quick setup is used)? Is there any conflict?

  • @ibrahimarif6966
    @ibrahimarif6966 Год назад +2

    do we need to do port forwarding in Modem provided by ISP? please explain.

  • @desert-home
    @desert-home 2 года назад +14

    A number of people have encountered the following error when they follow these instructions.
    "Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
    Options error: On Windows, --ifconfig is required when --dev tun is used""
    The fix is not what has been listed before like using the entire pathname to the files or an incorrect first line.
    There is a missing line at the very top; simply put "client" as the very first line then everything else is fine. If you look carefully at the video, this line is there, and if you look at the author's comment below the video, you'll see it there concatenated with the file name.
    It's an easy mistake to make (I did it) and equally easy to correct.
    The rest of the tutorial worked fine for me

  • @mohamedaman4501
    @mohamedaman4501 2 года назад +1

    ممتاز كالعادة thanks

  • @tomiabraham
    @tomiabraham 2 года назад

    Very good. Thanks a lot

  • @vienovan9195
    @vienovan9195 3 месяца назад

    Hướng dẫn rất dễ hiểu ! Xin cảm ơn bạn !

  • @goganikolashvili7074
    @goganikolashvili7074 Год назад

    thank you brooo its workin 100 %

  • @davidmateo8
    @davidmateo8 Год назад

    Muchas gracias, Funciona muy bien

  • @blizzstu
    @blizzstu 2 года назад

    Hi, Will this allow me to surf the internet as In my previous attempt with L2pt i can only access the local network.

  • @bhoyasunil3355
    @bhoyasunil3355 2 года назад +1

    Thank you so much this video i went.

    • @NETVN82
      @NETVN82  2 года назад

      Glad it helped

  • @athulashashan699
    @athulashashan699 2 года назад +1

    Thank you Sir

  • @athemkyuketsuki7566
    @athemkyuketsuki7566 2 года назад +1

    thank you broo, other videos don't talk about proxy arp

    • @NETVN82
      @NETVN82  2 года назад +1

      Welcome 👍

  • @hamedmoradi1471
    @hamedmoradi1471 Год назад +1

    Perfect!

  • @Inocenciodematos
    @Inocenciodematos 29 дней назад

    Thank you!

  • @kellyojanomare2379
    @kellyojanomare2379 11 месяцев назад

    i followed your step but it didnt automatically create openvpn folder on my desktop, what should i do? oris not working on mikrotik hex poe lite (mipsbe) ?

  • @mukto2004
    @mukto2004 Год назад

    how can i put ca,cert and secret into a single ovpn so that I can also use it on my phone

  • @noennun
    @noennun 7 месяцев назад

    @NETVN82 how to remove pop up "enter private key password" on the client ?

  • @eem1kv
    @eem1kv 7 месяцев назад

    Thanks for sharing.. I am getting an error message "Unrecognized option or missing or extra parameter(s) in openvpn.ovpn:3: proto (2.6.8)" Any suggestions ??

  • @user-xv6eu4lc7p
    @user-xv6eu4lc7p 11 месяцев назад

    nice tutorial

  • @cupsa6134
    @cupsa6134 Год назад

    what model of microtik router did you use?

  • @javiermurciagalvez5651
    @javiermurciagalvez5651 2 года назад

    Hello!! Genius, do you know why I don't get the public ip from the vpn server when I connect? I still keep the public ip of the mobile when I am connected to the vpn

  • @TheDoubleef
    @TheDoubleef Год назад +1

    Excelente. Obrigado

  • @megatfarid5516
    @megatfarid5516 10 месяцев назад

    Want to ask. Remote pc ip, means need pc turn on 24 hours so we can remote anywhere?

  • @rodneyandrade6299
    @rodneyandrade6299 Год назад +1

    Thanks 😃

  • @giuseppegrandis3409
    @giuseppegrandis3409 Год назад

    Is it possible to have the same local network on both sides?

  • @RodrigoLozada81
    @RodrigoLozada81 2 года назад +1

    Asus routers create a single ovpn file with the cert information in itself. Anyone tried to create a single file like that by copying it from the certs?

  • @krzysztofp.7520
    @krzysztofp.7520 2 года назад

    Hello, I have an OPENVPN server on Mikrotik, please help me configure the ovpn file for synology dsm7 connection, is it possible, best regards

  • @user-ty1pt3tu3s
    @user-ty1pt3tu3s 11 месяцев назад

    Options error: Unrecognized option or missing or extra parameter(s) in openvpn.ovpn:15: ciphers (2.6.5) :((

  • @christopheoudin3625
    @christopheoudin3625 2 года назад

    Hi good vidéo. Did you know how to configure ovpn server for using cloud ip or ddns as wan adresse. Thank you

  • @ahmednihadhussein2324
    @ahmednihadhussein2324 2 года назад

    thanks its very helpfull

    • @NETVN82
      @NETVN82  2 года назад

      Glad to hear that

  • @mohamedatef8424
    @mohamedatef8424 2 года назад

    Nice video and info , can u make another video to SSL VPN Site to site Mikrotik to sophos ?

  • @zaikan2
    @zaikan2 Год назад

    Hi bro , nice tutorial , i have a question : I wanna to creato 2 users ,I know can create in ppp -secrets, but .How do it with the secret file for client Open Vpn. Excusme for the bad english

  • @SyedAmmarHaider177
    @SyedAmmarHaider177 Год назад

    excellent video

    • @NETVN82
      @NETVN82  Год назад

      Thank you very much!

  • @user-tu8uq5vl4b
    @user-tu8uq5vl4b 2 года назад

    Thank you! Ok!

  • @natthapolchumrod4976
    @natthapolchumrod4976 2 года назад

    Thank Bro

  • @MuhammadFaysal
    @MuhammadFaysal 2 года назад +1

    please please make a tutorial on new (RouterOS 7) WireGuard VPN configuration like (A vpn provider to mikrotik router setup)

  • @miladsasani2375
    @miladsasani2375 Год назад

    i have problem after client connected unfortunately they cant connect to internet

  • @ThePatsev
    @ThePatsev Год назад

    I followed the steps but have no internet connection when connected to ovpn. Is this my mistake?

  • @BDServerSolutions
    @BDServerSolutions 2 года назад

    Thanks bro.

  • @branislavrikic
    @branislavrikic 2 года назад

    How many client certificates can generate on Mikrotik?!

  • @user-ul6yh5bg6m
    @user-ul6yh5bg6m Год назад

    can we do the same for v2ray vpn

  • @vnCamprocom
    @vnCamprocom Год назад

    Thank you so much. Can you help me to config client from mac os or android os connect with openvpn connect? when i import file xx.opvn, it's fail with notification : failed to parse profile: CA.crt, Client.crt, Client.key, secret

  • @MyOwntuahur
    @MyOwntuahur 2 года назад

    Terimakasih banyak atas informasinya

  • @MrFiDanik
    @MrFiDanik 9 месяцев назад +1

    Hello. i have a question about interface why you put on interface2? I mean step 5"Enable proxy arp on the lan interface. Can you please describe this step

    • @zelta4211
      @zelta4211 8 месяцев назад

      same i don't undersand why he select the lan 2

    • @MrFiDanik
      @MrFiDanik 8 месяцев назад

      @@zelta4211 maybe the main interface?

  • @kasiang7405
    @kasiang7405 2 года назад +2

    Can you make a video on proxy arp?

  • @meronvlogz
    @meronvlogz Месяц назад

    What do you do if your Mikrotik Router is the secondary router and you have to connect it to a primary router?

  • @leyeseyi
    @leyeseyi Год назад

    I followed the video all through but was get this error "dco connect error: The remote computer refused the network connection. (errno=1225)"
    Any help from anyone here, please?

  • @DevSingh-dh2rq
    @DevSingh-dh2rq 2 года назад

    Sir when I configer same I have show error

  • @hornchamroeun6064
    @hornchamroeun6064 2 года назад +1

    Thanks bro

  • @kqabro
    @kqabro 2 года назад +1

    Thanks for such a nice tutorial, however I am unable to create secret file without text version, and it saves only in that format despite removing .txt extension

    • @kqabro
      @kqabro 2 года назад +3

      gives me error "connection to management interface failed"
      followed each step and following is the log error "us=163584 Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
      Options error: On Windows, --ifconfig is required when --dev tun is used
      Use --help for more information."

    • @tomiabraham
      @tomiabraham 2 года назад

      Try to configure the file explorer to see always the extension of the files, so you can just delete it and it's all.

  • @gkakos1992
    @gkakos1992 Год назад

    how can i use these files to connect on the android open VPN? Please help me, thanks a lot for you video

  • @foxiiiiik
    @foxiiiiik 2 года назад +4

    Good tutorial. I got it up and running. Now I can ping and connect to my Mikrotik OpenVPN Server from remote OpenVPN Client. But I am still unable to ping any address behind the Mikrotik router. Do I still need to configure something ?

    • @Darktoto85
      @Darktoto85 2 года назад

      Hi ! Have you find why ?

    • @Darktoto85
      @Darktoto85 2 года назад +1

      Ho ! it's ok when i enable proxy-arp on bridge :-)

    • @Lagstra
      @Lagstra 2 года назад

      I had enabled proxy-arp on the bridge but i still cannot acces the internet through the VPN, only local addresses

    • @mohannadmazin
      @mohannadmazin 2 года назад

      the same problem... did you manage to find a solution?

    • @android2736
      @android2736 2 года назад

      routing?

  • @soelinnhtike
    @soelinnhtike 2 года назад

    Thank you.
    i'm Tested is Ok.

  • @abbasmikrotik1635
    @abbasmikrotik1635 2 года назад

    😍😍😍

  • @igorgomes1114
    @igorgomes1114 4 месяца назад

    thanks!!!!!!

  • @edusoftkenya6917
    @edusoftkenya6917 2 года назад

    Hello Nevin, just to be sure i must have a Public IP in order to create this?

    • @r.robbi.s3319
      @r.robbi.s3319 Год назад

      Same think, how if we dont have any public ip?
      @netvn

  • @keshavgautam173
    @keshavgautam173 Год назад

    Those guys who is facing internet issues after connecting to the VPN please add the following line in config file
    "redirect-gateway def 1" (don't put inverted comma)

  • @danangadikrisna9605
    @danangadikrisna9605 2 года назад +1

    I have problem with massage "Cipher negotiation is disabled since neither P2MP client nor server mode is enabled", What must I do ? please help me

    • @sftmark7
      @sftmark7 2 года назад

      I get the same error.

    • @danangadikrisna9605
      @danangadikrisna9605 2 года назад

      @@sftmark7 I found the tutorial and it worked
      visit link YT
      ruclips.net/video/kOOJgvz5Qu8/видео.html

    • @pollycode5327
      @pollycode5327 Год назад

      have you solved this problem? I have the same

    • @danangadikrisna9605
      @danangadikrisna9605 Год назад

      @@pollycode5327 ruclips.net/video/kOOJgvz5Qu8/видео.html

    • @vitoradolfo6119
      @vitoradolfo6119 Год назад

      add "client" at first line, in the config file

  • @Pierre_1279
    @Pierre_1279 2 года назад +1

    Hola!! Genio, sabes porque no recibo la ip publica del servidor vpn cuando me conecto?? Sigo manteniendo la ip publica del movil cuando estoy conectado al vpn

  • @loujenerenico1792
    @loujenerenico1792 Год назад

    how many can connect?

  • @beyond_it9722
    @beyond_it9722 2 года назад +2

    So what App are you use for Mapping the Network ?

    • @NETVN82
      @NETVN82  2 года назад +2

      i use eve-ng

    • @beyond_it9722
      @beyond_it9722 2 года назад

      @@NETVN82 owhh thats cool, and if i use smartphone can you recomende to me whatsapp i can use?

  • @mikrotikpakistan1630
    @mikrotikpakistan1630 2 года назад +1

    how to connect on mobile cli3nt

  • @cesaramaral4626
    @cesaramaral4626 2 года назад

    the video image is distorted

  • @lucascouto5194
    @lucascouto5194 2 года назад +5

    i can connect, but can't ping the internal devices. what should i do?

    • @Afraa34
      @Afraa34 2 года назад

      me too. did you fix it?

    • @lucascouto5194
      @lucascouto5194 2 года назад

      @@Afraa34 add the line "redirect-gateway def 1" (wihout quotes) on the .ovpn config file

    • @punchermash
      @punchermash 2 года назад

      @@lucascouto5194 Hello, I have the same problem. I connect to openvpn server and i can ping only gateway. I cant ping other devices in my network

    • @ashutoshbhakta5220
      @ashutoshbhakta5220 Год назад

      ​@@punchermash same here

    • @punchermash
      @punchermash Год назад

      @@ashutoshbhakta5220 you need to make new rule for nat masqurade from your lan to vpn client, and then it will be works

  • @ManueleFiorenza
    @ManueleFiorenza 2 года назад +1

    Mikrotik nat firewall configuration and port forwarding are missing! Can u provide it?

    • @Pierre_1279
      @Pierre_1279 2 года назад

      Input, tcp, dst port 1194, acept. Saludos!

    • @ManueleFiorenza
      @ManueleFiorenza 2 года назад

      @@Pierre_1279 incomplete! Retry

    • @johanerasmus63
      @johanerasmus63 2 года назад

      @@ManueleFiorenza Did you manage to find a solution?

  • @hariyanto5835
    @hariyanto5835 3 месяца назад

    exited with error: exit code = 1 please help

  • @rukhanzakaria
    @rukhanzakaria 2 года назад

    Next Tutorial, how to setup ovpnserver with 2 komputer Windows than they can sharing folder. Tq

  • @essonofrancis
    @essonofrancis 2 года назад +1

    Thanks

  • @user-lc3km7hi8s
    @user-lc3km7hi8s Год назад +1

    TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
    this is the error i get
    kindly advice

    • @leyeseyi
      @leyeseyi Год назад

      Hello @Hussein Issa
      I'm getting the same error too. Have you been able to fix it, please?
      Kindly provide any help.

  • @blazemark8697
    @blazemark8697 2 года назад

    my ros 6.46.8 log error duplicate packet,dropping

  • @FREELANCE_IT
    @FREELANCE_IT 2 года назад

    kalau client dari android, posisi konek pakai jaringan 4g sinyal android diterapkan openvpn

  • @infsoft
    @infsoft 2 года назад

    Hello, Hi how are you, the other OpenVPN videos, they were very interesting, why did you delete them?

    • @NETVN82
      @NETVN82  2 года назад +1

      i will upload soon

  • @pavelkraev7476
    @pavelkraev7476 6 месяцев назад +1

    You have mistake in your config google file. String 3. You need to put - between "proto tcp-client" otherwise it doesn't work!

  • @arashtorabi1217
    @arashtorabi1217 2 года назад

    I really enjoy configuring OPVN

  • @Shirinn_Guardian
    @Shirinn_Guardian 4 месяца назад

    What is this tool called? (At 0:49)

  • @compi-nation1300
    @compi-nation1300 2 года назад +1

    Hi im still getting my networks public IP instead of my routers public IP

    • @VampireBat
      @VampireBat Год назад

      Did you manage to solve the issue? I'm having the same issue.

  • @cesaramaral4626
    @cesaramaral4626 2 года назад

    the video image has a problem

  • @hugohelvio2076
    @hugohelvio2076 Год назад

    thx

  • @romandanko9506
    @romandanko9506 2 года назад +5

    2021-10-09 09:25:05 us=812000 Cipher negotiation is disabled since neither P2MP client nor server mode is enabled
    Options error: On Windows, --ifconfig is required when --dev tun is used
    Use --help for more information.

  • @diegkol
    @diegkol 2 года назад +3

    On Connect I get error: "Connecting to management interface failed. OpenVPN log error Cipher negotiation is disabled since neither P2MP client nor server mode is enabled. On Windows, --ifconfig is required when --dev tun is used."
    Solved:
    In openvpn.ovpn full path to certs and secret needs to be entered like "C:\\Program Files\\OpenVPN\\config\\cert_export_CA.crt" . Also added line client.

    • @ManueleFiorenza
      @ManueleFiorenza 2 года назад

      and for this-->
      2021-10-10 19:39:17 us=375000 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.

    • @RodrigoLozada81
      @RodrigoLozada81 2 года назад

      @@ManueleFiorenza this changes should be in the ovpn file directly? got an example to share?

    • @ManueleFiorenza
      @ManueleFiorenza 2 года назад

      @@RodrigoLozada81 issue is in newest version ! Install older, for ex. 2.4.4

  • @bichngoctrinh7131
    @bichngoctrinh7131 2 года назад +1

    thay Ip WAN bằng DDNS có sẵn của router được không ạ?

    • @NETVN82
      @NETVN82  2 года назад +1

      được chứ bạn

  • @markokaracic9933
    @markokaracic9933 2 года назад

    Can we put dns in CA CRL HOST instead public ip?
    And when we put ppp secret why we must set remote addres of pc?
    You have very good tutorials!

  • @crearelectronica
    @crearelectronica 2 года назад

    Porque los títulos de este canal, salen en español? 🤔

  • @explorevrt
    @explorevrt Год назад

    You haven't mentioned firewall

  • @ernestomagallanes4155
    @ernestomagallanes4155 2 года назад +1

    Not workinh

  • @amin-ko2yr
    @amin-ko2yr 2 года назад

    what is your software simulator

  • @ashutoshbhakta5220
    @ashutoshbhakta5220 Год назад

    nice tutorial, thanks for sharing

    • @NETVN82
      @NETVN82  Год назад

      Thank you too

    • @ashutoshbhakta5220
      @ashutoshbhakta5220 Год назад

      ​@@NETVN82 I am able to connect to open VPN to every remote computer also able to ping gateway but unable to ping the networ element ip's pls help

  • @user-kk2jq7vx5e
    @user-kk2jq7vx5e 2 года назад

    А я делаю на каждого индивидуальный сертификат.

  • @sefacix
    @sefacix 2 года назад

    It is a pity that your translations are not in Turkish.

  • @chalapakaraj2854
    @chalapakaraj2854 2 года назад +1

    1 view brother

  • @newerbits
    @newerbits Год назад

    for android use profile
    client
    dev tun
    proto tcp-client
    persist-key
    persist-tun
    tls-client
    remote-cert-tls server
    verb 4
    auth-nocache
    mute 10
    remote domain/ip/host
    port 1194
    auth SHA1
    cipher AES-256-CBC
    redirect-gateway def1
    auth-user-pass

  • @lqyj
    @lqyj 2 года назад

    Please make openvpn crack free 10k user

  • @pengumind151
    @pengumind151 Год назад

    Windows Fanboy ;-)