openvpn client connection

RouterOS General
1

Hello Everyone,
I have a RB-751U in my office and I’m setting up an openvpn connection. I really need openvpn since it has the capability to pass through most firewalls because it’s using common ports.

My certificates are well generated, I already imported them in my Mikrotik. Below is my sample Mikrotik config:

/ip pool add name=ovpn-pool ranges=10.1.0.2-10.1.0.100

/ppp profile
add change-tcp-mss=default comment=“” local-address=10.1.0.1
name=“openvpn-in” only-one=default remote-address=openvpn-pool
use-compression=default use-encryption=required use-vj-compression=default

/interface ovpn-server server set auth=sha1,md5 certificate=server-cert
cipher=blowfish128,aes128,aes192,aes256 default-profile=openvpn-in
enabled=yes keepalive-timeout=disabled max-mtu=1500 mode=ip netmask=24
port=1194 require-client-certificate=no

/ppp secret add disabled=no name=“client1” password=“password1”

My openvpn client utility (For Windows 7) is configured with the key I’ve generated from linux openvpn. When I connect I can already log-in, the problem is that I can only log in for a while. It say’s obtaining IP and my winbox logs are below:

14:33:01 ovpn,info TCP connection established from 222.1.1.1
14:33:01 ovpn,info : dialing…
14:33:04 ovpn,info : using encoding - AES-128-CBC/SHA1
14:33:05 ovpn,info : connected
14:33:05 ovpn,info,account client1 logged in, 10.0.1.51
14:33:17 ovpn,info,account client1 logged out, 13 0 0 0 0
14:33:17 ovpn,info : terminating… - peer disconnected
14:33:17 ovpn,info : disconnected

Has anyone tried using the openvpn client utility from openvpn.net?

Thanks in advanced.

2

I already copied my ca.crt, client1.key, client1.crt and client1.csr in the profile folder of my openvpn client

Below is my ovpn profile

#LNG=EN
redirect-gateway
remote 202.1.1.1 1194
client
dev tun
proto tcp
nobind
persist-key
persist-tun
remote-cert-tls server
ca ca.crt
cert client1.crt
key client1.key
comp-lzo
verb 3
auth-user-pass
tls-client
cipher AES-128-CBC

This is the profile that can connect but it can only connect for a while.
The openvpn display shows “obtaining configuration…” but it just hangs and never connects.

Help anyone?

3

Can anyone show me a ovpn profile that worked for them?

4

I have a hard time with this as well but right off the bat I can tell you that MT doesn’t support LZO so I’d remove that line.

5

Here is my config, if it helps…

client
remote some.host.name
ca /home/lex/root.crt
auth-user-pass
dev tun
proto tcp
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user openvpn
group openvpn

Simple as that. Working everyday, using this to see my home stuff on work and vice versa.

6

Hey Rivera, thanks. I’ll be trying it today again. I’ll give you guys your deserved karmas hahaha. I’ll update you base on my testing. Thanks

7

I tested this again and still haven’t connected I’m getting frustrated that my openvpn can’t work. Can anyone point me to any simple instructions they found in the Internet. So far the ones I’ve followed are bogus.

All I need is a simple openvpn server in my RB1100AH and one PC on a remote site to connect to my openVPN server and to my network.

I need help…anyone?

8

The issue where it immediately resets the connection is usually a mismatch on the PPP-Secret/user credentials.

(i.e. The username/password on the OVPN client don’t match that on the server.)

-Greg