Guide/Help for setting up PIA VPN on Mikrotik

RouterOS Beginner Basics
1

Hi,

I have been trying to setup a PIA vpn on my mikrotik router for days and I had no luck!
it shouldn’t be that hard, so I must be something very stupid or not looking at the right place to follow some instructions.

Hence this post, could someone please point to a guide/setup so I could use a PIA (privateinternetaccess) VPN client on my mikrotik router?

I have tried so many things I am now getting to the point of utter confusion :slight_smile:
I was on Router OS 6.49
I am now on 7.1.3
I even tried the 7.2Rc4
On all those ROS I tried to setup the following and get the same error
L2TP → error I get is LCP down
OPENVPN → Error I get is TLS failed

I am now starting to look at fireguard but there is no instructions on PIA on how to set this up on a router as a client.
I am happy (and will) share all my details steps, but before I go deeper in this rabbit hole I thought I would ask if there is any simple guide out there?

Thanks,
B.

2

https://netpro.lv/en/basic-l2tp-ipsec-server-configuration-on-a-mikrotik-device/
https://wiki.mikrotik.com/wiki/Manual:Interface/L2TP

3

FROM PIA SUPPORT
“Oh, if you are referring to a manual WireGuard configuration, I am afraid we don’t have that kind of setup here in PIA yet.”

Many can and do provide manual config files you can use on MT devices.
MULLVAD
CactusVPN
Azirevpn

4

Thank you very much, I will use this a base to do further testing!
Hopefully I will revert back in a few days with a successful attempt :slight_smile:

Cheers,
B.

5

Thanks! I will look at the config from those providers too!

6

Did you have any luck?

7

Also looking to accomplish this. I got pretty close with L2TP/IPSec, but it looks like PIA has disabled this for some reason?? I can’t figure out how to get the Openvpn client working with the certs PIA provides, so I’m pretty stuck. My server is headless, and running linux, so I can’t install their client in any usable fashion. I get the subscription for free, so I’m kind of married to them as a provider. I already asked them about wireguard, and I got the same answer as the other users “We don’t have that yet”.

8

Then free is useless.

9

Try this cert form me it works.
https://burszta.eu/pai-cert-mikrotik-works-crl.rsa.2048.pem

Issue was that mikrotik needed key (.pem file) for cert in the same file as cert so i copied a cert to beginning of .pem file and it works.