Mikrotik+LDAP+OpenVPN+2 Factor Authentication

Hello!

Is it possible to setup this schema?

Thank you.

I don’t think any MikroTik VPN implementation can connect directly to an LDAP directory, but you can proxy to it using a RADIUS server. You can probably also add in a 2FA solution, but that gets more complicate. I’d just stand up an OpenVPN Access Server behind your router, static NAT TCP 443 and UDP 1194 into the Ovpn-AS and call it a day. OpenVPN Access Server natively supports 2FA using Google Authenticator, so it’s really easy to set up.

I configure 2FA with openvpn using freeradius.

https://medium.com/@earielli/chr-mkt-openvpn-2fa-with-freeradius-and-google-authenticator-a297ec19cc20