>>> Mikrotik OpenVPN + StrongVPN <<<

YUJOBIKA · June 4, 2009, 5:11am

Hi,

Anyone have tried to use Mikrotik as OpenVPN Client with OpenVPN Server from www.strongvpn.com ? I tried many times and Mikrotik could not connect to their server.

Please solve this.

Regards

mrz · June 4, 2009, 5:45am

post your openvpn configuration

YUJOBIKA · June 4, 2009, 6:39am

I just earased all config yesterday. But I will make it again.

OpenVPN from strongvpn used UDP. Does Mikrotik support it ?
I use ROS v3.24.

Thanks

mrz · June 4, 2009, 7:05am

No, it supports only TCP.

YUJOBIKA · June 4, 2009, 7:15am

I am chatting with their support now. And he said can switch OpenVPN Server to TCP.
I will make new config now and will let you know soon.

Thanks

mrz · June 4, 2009, 7:31am

Also LZO compression is not supported, and requires username and password authentications

YUJOBIKA · June 4, 2009, 8:08am

They already switch my OpenVPN to TCP port.

Here files I got from them:

ta.key
ovpn007.ovpn
ovpn007.key
ovpn007.crt
install-ovpn007.sh
install-ovpn007.cmd
ca.crt

Then I open those files with notepad to see what inside. Here is inside those files:

ta.key

#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
68001c583f5712868f5616b1c69de9d5
c4eee17436c3f4f8986d5e62bb55e782
1342c2e7ad1debcecaea253acc23d5e9
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
blablablablablablablablablablablablabla
-----END OpenVPN Static key V1-----

ovpn007.ovpn

remote 74.125.xxx.xxx 1201
proto tcp
ca ca.crt
cert ovpn007.crt
key ovpn007.key
tls-auth ta.key 1
client
dev tun007
resolv-retry infinite
nobind
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
verb 4
mute 5
tun-mtu 1500
fragment  1300
mssfix 1450

ovpn007.key

ovpn007.crt

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=US, ST=NA, L=San-Francisco, O=oakweb.com, CN=ovpn007/emailAddress=techies@xxxx.com
        Validity
            Not Before: Sep 13 14:49:05 2008 GMT
            Not After : Sep 11 14:49:05 2018 GMT
        Subject: C=US, ST=NA, O=oakweb.com, CN=ovpn007/emailAddress=techies@xxxxxxxxxx.com
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
            RSA Public Key: (1024 bit)
                Modulus (1024 bit):
                    00:b7:c3:8c:9d:6c:f5:e5:e0:4b:ef:d5:4f:d1:03:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:
                    xx:xx:xx:xx:xx
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: 
                CA:FALSE
            Netscape Comment: 
                OpenSSL Generated Certificate
            X509v3 Subject Key Identifier: 
                D4:6D:97:95:9C:48:BF:8D:D6:CB:BE:63:20:ED:29:5E:5E:2A:B6:D2
            X509v3 Authority Key Identifier: 
                keyid:17:26:8C:D7:F7:D2:EC:86:6E:1C:74:41:7A:38:F1:FA:F1:3C:9E:F7
                DirName:/C=US/ST=NA/L=San-Francisco/O=oakweb.com/CN=ovpn007/emailAddress=techies@xxxxxxxxxx.com
                serial:F5:5A:C4:BA:C8:A5:5F:8D

    Signature Algorithm: md5WithRSAEncryption
        27:14:c8:7c:d7:11:27:74:4c:4a:2b:0a:f6:d7:5e:2a:b7:81:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xxxx:xx:xx:xx:xx:
        xx:xx
-----BEGIN CERTIFICATE-----
MIIDhDCCAu2gAwIBAgIBAjANBgkqhkiG9w0BAQQFADCBhTELMAkGA1UEBhMCVVMx
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablablabla
blablablablablablablablablablablablablablablablablablablablablablablablablablabla==
-----END CERTIFICATE-----

install-ovpn007.sh

#!/bin/sh

if [ ! -e /etc/openvpn ]; then mkdir -p /etc/openvpn; fi
cp ovpn007.ovpn /etc/openvpn/ovpn007.conf
cp ca.crt ovpn007.crt ovpn007.key ta.key /etc/openvpn

install-ovpn007.cmd

@echo off

copy /a ovpn007.ovpn ovpn007.key ovpn007.crt ta.key ca.crt "C:\Program Files\OpenVPN\config"

ca.crt

Does this OpenVPN support with Mikrotik ?

Thanks

mrz · June 4, 2009, 8:18am

YUJOBIKA · June 4, 2009, 9:22am

Ok, thanks for your help.

andis · October 20, 2010, 9:24pm

YUJOBIKA, any success with openvpn connection to strongvpn.com ?

YUJOBIKA · October 23, 2010, 6:56pm

Hi, never success
So I am using normal VPN only.

firewallrule · October 25, 2010, 7:10pm

I once posted an issue in regard to vpn connection.

In my case, i could establish a connection to a vpn server with PPTP. But my concern was how my client could connect to the internet through the vpn instead of direction connection to the internet,

Good solution should be posted here please.

firewallrule · March 14, 2011, 3:10pm

@YUJOBIKA

Is ur mikrotik connected a vpn server?

firewallrule · March 14, 2011, 3:10pm

@YUJOBIKA

Is ur mikrotik connected to a vpn server?