How to create VPN server on Mikrotik with OpenVPN ( Client to Site )

Тәжірибелік нұсқаулар және стиль

How to connect to your work network from outside the office
In this short video, I suggest you a solution with the Mikrotik router
Mikrotik RB2011UiAS-2HnD-IN amzn.to/3LZlXOv
Desk Lamp, Black amzn.to/3s3wSyL
Desk Lamp, Clamp amzn.to/47tNvnw
Cofig file drive.google.com/file/d/1-JHx...
==========
#Template client.ovpnclient
dev tun
proto tcp-client
remote 123.25.70.1
port 1194
nobind
persist-key
persist-tun
tls-client
remote-cert-tls server
ca ca.crt
cert client.crt
key client.key
verb 4
mute 10
cipher AES-256-CBC
auth SHA1
auth-user-pass secret
auth-nocache
Thanks for watching, don't forget like and subscribe at goo.gl/LoatZE
0:00 Introduction
0:07 Generate Certificate
2:16 Export and download your certificate
3:27 Setup OpenVPN Server
3:57 Create vpn user
4:34 Enable proxy arp on the LAN interface
4:49 5. Install openVPN Client on user device
5:29 Copy your CA and client certificates and client key files into config directory
5:50 Create Config File for openVPN Client
7:01 Create a file named secret in config directory and specify username and password in this file
7:37 Connecting OpenVPN Client
Dream 600K Sub / netvn82
#netvn #openvpn #mikrotik #mikrotikvpn

Пікірлер: 162

  • @milleroliveira7809
    @milleroliveira78092 жыл бұрын

    Simple and directed! Thanks man

  • @SamirNetCore
    @SamirNetCore2 жыл бұрын

    Nice tutorial. I have only one issue with the new version of OpenVPN. OpenVPN always gave an error with the private key, I solved it by changing the line "cipher AES-256-CBC" to "data-ciphers AES-256-CBC" in the config file.

  • @amirhosseinkhodami762
    @amirhosseinkhodami7622 жыл бұрын

    Perfect! Thank you so much

  • @JAM-bf7lc
    @JAM-bf7lc Жыл бұрын

    beautiful tutorial, thank you very much and thanks again for sharing your knowledge

  • @NETVN82

    @NETVN82

    Жыл бұрын

    Thanks for watching!

  • @alexcruces8759
    @alexcruces8759 Жыл бұрын

    very very thanks, you are the best teacher on the world, I always see your videos and I've learned too much

  • @NETVN82

    @NETVN82

    Жыл бұрын

    Glad to hear that!

  • @fabiowillian7785
    @fabiowillian77852 жыл бұрын

    thank you !! you are the number one!!

  • @nikitalopez1810
    @nikitalopez18102 жыл бұрын

    Thank you friend, you bring a lot of knowledge and super interesting tools, please you could create a video step by step configure hotspot internet sale by pins or voucher🙏

  • @davidmateo8
    @davidmateo8 Жыл бұрын

    Muchas gracias, Funciona muy bien

  • @tomiabraham
    @tomiabraham2 жыл бұрын

    Very good. Thanks a lot

  • @hamedmoradi1471
    @hamedmoradi1471 Жыл бұрын

    Perfect!

  • @vienovan9195
    @vienovan91953 ай бұрын

    Hướng dẫn rất dễ hiểu ! Xin cảm ơn bạn !

  • @mohamedaman4501
    @mohamedaman45012 жыл бұрын

    ممتاز كالعادة thanks

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    thanks

  • @goganikolashvili7074
    @goganikolashvili7074 Жыл бұрын

    thank you brooo its workin 100 %

  • @athulashashan699
    @athulashashan6992 жыл бұрын

    Thank you Sir

  • @TheDoubleef
    @TheDoubleef Жыл бұрын

    Excelente. Obrigado

  • @digitalinformatica-solucoe5409

    @digitalinformatica-solucoe5409

    10 ай бұрын

    Bom dia! Deu certo o procedimento feito acima? o meu da erro ao executar o openvpn...

  • @desert-home
    @desert-home2 жыл бұрын

    A number of people have encountered the following error when they follow these instructions. "Cipher negotiation is disabled since neither P2MP client nor server mode is enabled Options error: On Windows, --ifconfig is required when --dev tun is used"" The fix is not what has been listed before like using the entire pathname to the files or an incorrect first line. There is a missing line at the very top; simply put "client" as the very first line then everything else is fine. If you look carefully at the video, this line is there, and if you look at the author's comment below the video, you'll see it there concatenated with the file name. It's an easy mistake to make (I did it) and equally easy to correct. The rest of the tutorial worked fine for me

  • @athemkyuketsuki7566
    @athemkyuketsuki75662 жыл бұрын

    thank you broo, other videos don't talk about proxy arp

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Welcome 👍

  • @bhoyasunil3355
    @bhoyasunil33552 жыл бұрын

    Thank you so much this video i went.

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Glad it helped

  • @ibrahimarif6966
    @ibrahimarif69662 жыл бұрын

    do we need to do port forwarding in Modem provided by ISP? please explain.

  • @Quettesh
    @Quettesh10 ай бұрын

    What about default firewall rules (configured when quick setup is used)? Is there any conflict?

  • @user-tu8uq5vl4b
    @user-tu8uq5vl4b2 жыл бұрын

    Thank you! Ok!

  • @rodneyandrade6299
    @rodneyandrade6299 Жыл бұрын

    Thanks 😃

  • @natthapolchumrod4976
    @natthapolchumrod49762 жыл бұрын

    Thank Bro

  • @MyOwntuahur
    @MyOwntuahur2 жыл бұрын

    Terimakasih banyak atas informasinya

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Thanks

  • @mohamedatef8424
    @mohamedatef84242 жыл бұрын

    Nice video and info , can u make another video to SSL VPN Site to site Mikrotik to sophos ?

  • @abbasmikrotik1635
    @abbasmikrotik16352 жыл бұрын

    😍😍😍

  • @JohnBerry1
    @JohnBerry1 Жыл бұрын

    Thank you!

  • @NETVN82

    @NETVN82

    Жыл бұрын

    You're welcome!

  • @user-xv6eu4lc7p
    @user-xv6eu4lc7p11 ай бұрын

    nice tutorial

  • @ahmednihadhussein2324
    @ahmednihadhussein23242 жыл бұрын

    thanks its very helpfull

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Glad to hear that

  • @BDServerSolutions
    @BDServerSolutions2 жыл бұрын

    Thanks bro.

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Welcome

  • @blizzstu
    @blizzstu2 жыл бұрын

    Hi, Will this allow me to surf the internet as In my previous attempt with L2pt i can only access the local network.

  • @hornchamroeun6064
    @hornchamroeun60642 жыл бұрын

    Thanks bro

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Welcome

  • @SyedAmmarHaider177
    @SyedAmmarHaider177 Жыл бұрын

    excellent video

  • @NETVN82

    @NETVN82

    Жыл бұрын

    Thank you very much!

  • @kellyojanomare2379
    @kellyojanomare237911 ай бұрын

    i followed your step but it didnt automatically create openvpn folder on my desktop, what should i do? oris not working on mikrotik hex poe lite (mipsbe) ?

  • @MuhammadFaysal
    @MuhammadFaysal2 жыл бұрын

    please please make a tutorial on new (RouterOS 7) WireGuard VPN configuration like (A vpn provider to mikrotik router setup)

  • @essonofrancis
    @essonofrancis2 жыл бұрын

    Thanks

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Welcome

  • @eem1kv
    @eem1kv7 ай бұрын

    Thanks for sharing.. I am getting an error message "Unrecognized option or missing or extra parameter(s) in openvpn.ovpn:3: proto (2.6.8)" Any suggestions ??

  • @megatfarid5516
    @megatfarid551610 ай бұрын

    Want to ask. Remote pc ip, means need pc turn on 24 hours so we can remote anywhere?

  • @mukto2004
    @mukto2004 Жыл бұрын

    how can i put ca,cert and secret into a single ovpn so that I can also use it on my phone

  • @igorgomes1114
    @igorgomes11144 ай бұрын

    thanks!!!!!!

  • @javiermurciagalvez5651
    @javiermurciagalvez56512 жыл бұрын

    Hello!! Genius, do you know why I don't get the public ip from the vpn server when I connect? I still keep the public ip of the mobile when I am connected to the vpn

  • @kasiang7405
    @kasiang74052 жыл бұрын

    Can you make a video on proxy arp?

  • @soelinnhtike
    @soelinnhtike2 жыл бұрын

    Thank you. i'm Tested is Ok.

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Welcome

  • @noennun
    @noennun7 ай бұрын

    @NETVN82 how to remove pop up "enter private key password" on the client ?

  • @cupsa6134
    @cupsa6134 Жыл бұрын

    what model of microtik router did you use?

  • @hugohelvio2076
    @hugohelvio2076 Жыл бұрын

    thx

  • @krzysztofp.7520
    @krzysztofp.75202 жыл бұрын

    Hello, I have an OPENVPN server on Mikrotik, please help me configure the ovpn file for synology dsm7 connection, is it possible, best regards

  • @keshavgautam173
    @keshavgautam173 Жыл бұрын

    Those guys who is facing internet issues after connecting to the VPN please add the following line in config file "redirect-gateway def 1" (don't put inverted comma)

  • @user-ty1pt3tu3s
    @user-ty1pt3tu3s11 ай бұрын

    Options error: Unrecognized option or missing or extra parameter(s) in openvpn.ovpn:15: ciphers (2.6.5) :((

  • @arashtorabi1217
    @arashtorabi12172 жыл бұрын

    I really enjoy configuring OPVN

  • @gokhantekin3093

    @gokhantekin3093

    2 жыл бұрын

    Can you help me too?

  • @giuseppegrandis3409
    @giuseppegrandis3409 Жыл бұрын

    Is it possible to have the same local network on both sides?

  • @zaikan2
    @zaikan2 Жыл бұрын

    Hi bro , nice tutorial , i have a question : I wanna to creato 2 users ,I know can create in ppp -secrets, but .How do it with the secret file for client Open Vpn. Excusme for the bad english

  • @RodrigoLozada81
    @RodrigoLozada812 жыл бұрын

    Asus routers create a single ovpn file with the cert information in itself. Anyone tried to create a single file like that by copying it from the certs?

  • @christopheoudin3625
    @christopheoudin36252 жыл бұрын

    Hi good vidéo. Did you know how to configure ovpn server for using cloud ip or ddns as wan adresse. Thank you

  • @rukhanzakaria
    @rukhanzakaria2 жыл бұрын

    Next Tutorial, how to setup ovpnserver with 2 komputer Windows than they can sharing folder. Tq

  • @ThePatsev
    @ThePatsev Жыл бұрын

    I followed the steps but have no internet connection when connected to ovpn. Is this my mistake?

  • @meronvlogz
    @meronvlogzАй бұрын

    What do you do if your Mikrotik Router is the secondary router and you have to connect it to a primary router?

  • @leyeseyi
    @leyeseyi Жыл бұрын

    I followed the video all through but was get this error "dco connect error: The remote computer refused the network connection. (errno=1225)" Any help from anyone here, please?

  • @pavelkraev7476
    @pavelkraev74766 ай бұрын

    You have mistake in your config google file. String 3. You need to put - between "proto tcp-client" otherwise it doesn't work!

  • @foxiiiiik
    @foxiiiiik2 жыл бұрын

    Good tutorial. I got it up and running. Now I can ping and connect to my Mikrotik OpenVPN Server from remote OpenVPN Client. But I am still unable to ping any address behind the Mikrotik router. Do I still need to configure something ?

  • @Darktoto85

    @Darktoto85

    2 жыл бұрын

    Hi ! Have you find why ?

  • @Darktoto85

    @Darktoto85

    2 жыл бұрын

    Ho ! it's ok when i enable proxy-arp on bridge :-)

  • @Lagstra

    @Lagstra

    2 жыл бұрын

    I had enabled proxy-arp on the bridge but i still cannot acces the internet through the VPN, only local addresses

  • @mohannadmazin

    @mohannadmazin

    2 жыл бұрын

    the same problem... did you manage to find a solution?

  • @android2736

    @android2736

    2 жыл бұрын

    routing?

  • @miladsasani2375
    @miladsasani2375 Жыл бұрын

    i have problem after client connected unfortunately they cant connect to internet

  • @MrFiDanik
    @MrFiDanik10 ай бұрын

    Hello. i have a question about interface why you put on interface2? I mean step 5"Enable proxy arp on the lan interface. Can you please describe this step

  • @zelta4211

    @zelta4211

    9 ай бұрын

    same i don't undersand why he select the lan 2

  • @MrFiDanik

    @MrFiDanik

    9 ай бұрын

    @@zelta4211 maybe the main interface?

  • @vnCamprocom
    @vnCamprocom Жыл бұрын

    Thank you so much. Can you help me to config client from mac os or android os connect with openvpn connect? when i import file xx.opvn, it's fail with notification : failed to parse profile: CA.crt, Client.crt, Client.key, secret

  • @gkakos1992
    @gkakos1992 Жыл бұрын

    how can i use these files to connect on the android open VPN? Please help me, thanks a lot for you video

  • @edusoftkenya6917
    @edusoftkenya69172 жыл бұрын

    Hello Nevin, just to be sure i must have a Public IP in order to create this?

  • @r.robbi.s3319

    @r.robbi.s3319

    Жыл бұрын

    Same think, how if we dont have any public ip? @netvn

  • @lucascouto5194
    @lucascouto51942 жыл бұрын

    i can connect, but can't ping the internal devices. what should i do?

  • @Afraa34

    @Afraa34

    2 жыл бұрын

    me too. did you fix it?

  • @lucascouto5194

    @lucascouto5194

    2 жыл бұрын

    @@Afraa34 add the line "redirect-gateway def 1" (wihout quotes) on the .ovpn config file

  • @punchermash

    @punchermash

    2 жыл бұрын

    @@lucascouto5194 Hello, I have the same problem. I connect to openvpn server and i can ping only gateway. I cant ping other devices in my network

  • @ashutoshbhakta5220

    @ashutoshbhakta5220

    Жыл бұрын

    ​@@punchermash same here

  • @punchermash

    @punchermash

    Жыл бұрын

    @@ashutoshbhakta5220 you need to make new rule for nat masqurade from your lan to vpn client, and then it will be works

  • @Pierre_1279
    @Pierre_12792 жыл бұрын

    Hola!! Genio, sabes porque no recibo la ip publica del servidor vpn cuando me conecto?? Sigo manteniendo la ip publica del movil cuando estoy conectado al vpn

  • @javiermurciagalvez5651

    @javiermurciagalvez5651

    2 жыл бұрын

    me pasa lo mismo, lo has podido solucionar?

  • @branislavrikic
    @branislavrikic2 жыл бұрын

    How many client certificates can generate on Mikrotik?!

  • @beyond_it9722
    @beyond_it97222 жыл бұрын

    So what App are you use for Mapping the Network ?

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    i use eve-ng

  • @beyond_it9722

    @beyond_it9722

    2 жыл бұрын

    @@NETVN82 owhh thats cool, and if i use smartphone can you recomende to me whatsapp i can use?

  • @kqabro
    @kqabro2 жыл бұрын

    Thanks for such a nice tutorial, however I am unable to create secret file without text version, and it saves only in that format despite removing .txt extension

  • @kqabro

    @kqabro

    2 жыл бұрын

    gives me error "connection to management interface failed" followed each step and following is the log error "us=163584 Cipher negotiation is disabled since neither P2MP client nor server mode is enabled Options error: On Windows, --ifconfig is required when --dev tun is used Use --help for more information."

  • @tomiabraham

    @tomiabraham

    2 жыл бұрын

    Try to configure the file explorer to see always the extension of the files, so you can just delete it and it's all.

  • @danangadikrisna9605
    @danangadikrisna96052 жыл бұрын

    I have problem with massage "Cipher negotiation is disabled since neither P2MP client nor server mode is enabled", What must I do ? please help me

  • @sftmark7

    @sftmark7

    2 жыл бұрын

    I get the same error.

  • @danangadikrisna9605

    @danangadikrisna9605

    2 жыл бұрын

    @@sftmark7 I found the tutorial and it worked visit link YT kzread.info/dash/bejne/nYODrMmvqpi3pZs.html

  • @pollycode5327

    @pollycode5327

    Жыл бұрын

    have you solved this problem? I have the same

  • @danangadikrisna9605

    @danangadikrisna9605

    Жыл бұрын

    @@pollycode5327 kzread.info/dash/bejne/nYODrMmvqpi3pZs.html

  • @vitoradolfo6119

    @vitoradolfo6119

    Жыл бұрын

    add "client" at first line, in the config file

  • @chalapakaraj2854
    @chalapakaraj28542 жыл бұрын

    1 view brother

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    Thanks

  • @romandanko9506
    @romandanko95062 жыл бұрын

    2021-10-09 09:25:05 us=812000 Cipher negotiation is disabled since neither P2MP client nor server mode is enabled Options error: On Windows, --ifconfig is required when --dev tun is used Use --help for more information.

  • @RodrigoLozada81

    @RodrigoLozada81

    2 жыл бұрын

    Got an example config to share?

  • @ernestomagallanes4155

    @ernestomagallanes4155

    2 жыл бұрын

    I got same problem

  • @ManueleFiorenza
    @ManueleFiorenza2 жыл бұрын

    Mikrotik nat firewall configuration and port forwarding are missing! Can u provide it?

  • @Pierre_1279

    @Pierre_1279

    2 жыл бұрын

    Input, tcp, dst port 1194, acept. Saludos!

  • @ManueleFiorenza

    @ManueleFiorenza

    2 жыл бұрын

    @@Pierre_1279 incomplete! Retry

  • @johanerasmus63

    @johanerasmus63

    2 жыл бұрын

    @@ManueleFiorenza Did you manage to find a solution?

  • @infsoft
    @infsoft2 жыл бұрын

    Hello, Hi how are you, the other OpenVPN videos, they were very interesting, why did you delete them?

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    i will upload soon

  • @bichngoctrinh7131
    @bichngoctrinh71312 жыл бұрын

    thay Ip WAN bằng DDNS có sẵn của router được không ạ?

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    được chứ bạn

  • @user-lc3km7hi8s
    @user-lc3km7hi8s Жыл бұрын

    TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity) this is the error i get kindly advice

  • @leyeseyi

    @leyeseyi

    Жыл бұрын

    Hello @Hussein Issa I'm getting the same error too. Have you been able to fix it, please? Kindly provide any help.

  • @diegkol
    @diegkol2 жыл бұрын

    On Connect I get error: "Connecting to management interface failed. OpenVPN log error Cipher negotiation is disabled since neither P2MP client nor server mode is enabled. On Windows, --ifconfig is required when --dev tun is used." Solved: In openvpn.ovpn full path to certs and secret needs to be entered like "C:\\Program Files\\OpenVPN\\config\\cert_export_CA.crt" . Also added line client.

  • @ManueleFiorenza

    @ManueleFiorenza

    2 жыл бұрын

    and for this--> 2021-10-10 19:39:17 us=375000 DEPRECATED OPTION: --cipher set to 'AES-256-CBC' but missing in --data-ciphers (AES-256-GCM:AES-128-GCM). Future OpenVPN version will ignore --cipher for cipher negotiations. Add 'AES-256-CBC' to --data-ciphers or change --cipher 'AES-256-CBC' to --data-ciphers-fallback 'AES-256-CBC' to silence this warning.

  • @RodrigoLozada81

    @RodrigoLozada81

    2 жыл бұрын

    @@ManueleFiorenza this changes should be in the ovpn file directly? got an example to share?

  • @ManueleFiorenza

    @ManueleFiorenza

    2 жыл бұрын

    @@RodrigoLozada81 issue is in newest version ! Install older, for ex. 2.4.4

  • @compi-nation1300
    @compi-nation13002 жыл бұрын

    Hi im still getting my networks public IP instead of my routers public IP

  • @VampireBat

    @VampireBat

    Жыл бұрын

    Did you manage to solve the issue? I'm having the same issue.

  • @FREELANCE_IT
    @FREELANCE_IT2 жыл бұрын

    kalau client dari android, posisi konek pakai jaringan 4g sinyal android diterapkan openvpn

  • @user-ul6yh5bg6m
    @user-ul6yh5bg6m Жыл бұрын

    can we do the same for v2ray vpn

  • @markokaracic9933
    @markokaracic99332 жыл бұрын

    Can we put dns in CA CRL HOST instead public ip? And when we put ppp secret why we must set remote addres of pc? You have very good tutorials!

  • @saulreyes5570

    @saulreyes5570

    Жыл бұрын

    did it work ?

  • @ashutoshbhakta5220
    @ashutoshbhakta5220 Жыл бұрын

    nice tutorial, thanks for sharing

  • @NETVN82

    @NETVN82

    Жыл бұрын

    Thank you too

  • @ashutoshbhakta5220

    @ashutoshbhakta5220

    Жыл бұрын

    ​@@NETVN82 I am able to connect to open VPN to every remote computer also able to ping gateway but unable to ping the networ element ip's pls help

  • @DevSingh-dh2rq
    @DevSingh-dh2rq2 жыл бұрын

    Sir when I configer same I have show error

  • @mikrotikpakistan1630
    @mikrotikpakistan16302 жыл бұрын

    how to connect on mobile cli3nt

  • @hariyanto5835
    @hariyanto58353 ай бұрын

    exited with error: exit code = 1 please help

  • @crearelectronica
    @crearelectronica2 жыл бұрын

    Porque los títulos de este canal, salen en español? 🤔

  • @Shirinn_Guardian
    @Shirinn_Guardian5 ай бұрын

    What is this tool called? (At 0:49)

  • @cesaramaral4626
    @cesaramaral46262 жыл бұрын

    the video image is distorted

  • @explorevrt
    @explorevrt Жыл бұрын

    You haven't mentioned firewall

  • @user-kk2jq7vx5e
    @user-kk2jq7vx5e2 жыл бұрын

    А я делаю на каждого индивидуальный сертификат.

  • @loujenerenico1792
    @loujenerenico1792 Жыл бұрын

    how many can connect?

  • @cesaramaral4626
    @cesaramaral46262 жыл бұрын

    the video image has a problem

  • @sefacix
    @sefacix2 жыл бұрын

    It is a pity that your translations are not in Turkish.

  • @blazemark8697
    @blazemark86972 жыл бұрын

    my ros 6.46.8 log error duplicate packet,dropping

  • @newerbits
    @newerbits Жыл бұрын

    for android use profile client dev tun proto tcp-client persist-key persist-tun tls-client remote-cert-tls server verb 4 auth-nocache mute 10 remote domain/ip/host port 1194 auth SHA1 cipher AES-256-CBC redirect-gateway def1 auth-user-pass

  • @caiovictor5070

    @caiovictor5070

    Жыл бұрын

    N Funciona

  • @amin-ko2yr
    @amin-ko2yr2 жыл бұрын

    what is your software simulator

  • @NETVN82

    @NETVN82

    2 жыл бұрын

    eve ng

  • @ernestomagallanes4155
    @ernestomagallanes41552 жыл бұрын

    Not workinh

  • @lqyj
    @lqyj2 жыл бұрын

    Please make openvpn crack free 10k user

  • @pengumind151
    @pengumind151 Жыл бұрын

    Windows Fanboy ;-)

Келесі