Do I need a static internet IP to create a VPN?

RouterOS General
1

Hi guys

I am following this wiki on open VPN:http://wiki.mikrotik.com/wiki/OpenVPN#Why_to_use_OpenVPN_.3F

/ip address add address=10.15.30.31/24 interface=ether1 comment=Lan
/ip address add address=189.64.0.2/24 interface=ether2 comment=Internet
/ip route add dst-address=10.0.0.0/8 gateway=10.15.30.5 comment=Wan
/ip route add gateway=189.64.0.1 comment=Internet

Does the 189.64.0.2/24 need to be a static IP assigned by my ISP or can I make it up?

thanks

2

You have to have a public IP if you wish to address the VPN server on the internet. Several ways of doing this, dynamic DNS services will allow you to have a dynamic IP, and update the DNS servers. Then you vpn into the dns address vs the IP as the IP can change.

Second is to have a static public IP, this is the simplest, but requires a static public IP.

3

thanks gmsmstr

How do I configure my clients to connect to the domain name as ROS v.3.10 requires me to enter an actual ip address for pptp,opvn, eoip

4

Check out http://www.changeip.com.

Works very well.

5

You’ll need to check this out.
http://wiki.mikrotik.com/wiki/Dynamic_DNS_Update_Script_for_ChangeIP.com

Did you get my pm?

6

RouterOS - RouterOS - MikroTik Documentation ... angeIP.com refers to the script that is used for the VPN Server to update dynamic ip
to static name.

On the client side running routeros I use the following script.

Script Starts

:global newvpnip [:resolve $changeiphostname]
:global currentvpnip [/interface pptp-client get $vpnname connect-to]

:if ($currentvpnip != $newvpnip) do={
:log info "Change VPN IP"
/interface pptp-client set $vpnname connect-to=$newvpnip
}

Script Ends

Replace $changeiphostname to the Hostname of your VPN Server, and $vpnname to the vpn connection name example pptp-out1 etc.

Then schedule the script to run say every 5 minutes.

Works very well for me.

7

wow thanks guys, that looks pretty simple but powerful

Hilton, I can’t seem to send or receive PM’s…Says that it is locked…how do I unlock it?

8

I sent it to your email address? something at webafrica?

Not? If you didn’t get it, I would like that video pls, hiltonr[at]gmail.com

Ta.