MikroTik hAP Lite as OVPN Client

RouterOS Beginner Basics
1

Hello everybody in my first topic,

I have two MikroTik hAP Lite. One of them is OVPN Server, second one is AP in my home. I using computer conected by Wi-Fi to second MikroTik as OVPN Client and after establish connection I connecting via RDP to computer in first MikroTik LAN.

I would like to connect second MikroTik as OVPN Client. My configuration file which working properly on computer/phone:

client
dev tun
proto tcp
remote example_address example_port
resolv-retry infinite
nobind
persist-key
persist-tun
askpass /etc/openvpn/client/Klient5.pass
ca /etc/openvpn/client/ca.crt
cert /etc/openvpn/client/klient5.crt
key /etc/openvpn/client/klient5.key
remote-cert-tls server
cipher AES-256-CBC
auth SHA1
auth-user-pass /etc/openvpn/client/auth.txt
###
#redirect-gateway def1
route 192.168.88.0 255.255.255.0
###
verb 3

I configure interface:
interface.png
profile:
failed.png
pofile.png
certificats:
certs.png
And I getting filed:
profile.png
Thanks for any suggestions what I doing wrong :slight_smile:

2

Likely you have selected the wrong certificate for the OVPN client - it should be the client certificate, not the CA or server certificate.

The CA and any intermediate certs used by the server only have to be installed under System > Certificates so the can be found when Verify Server Certificate is enabled.

3

I change it to client certificate, and now it is working! Thank you!