openvpn only certificate match how configure?

RouterOS Beginner Basics
1

hi friends
i want to configure this openvpn configuration on my microtik board:
#openvpn.conf

client
dev tun
proto tcp
remote servername tcp port
resolv-retry infinite
nobind
persist-key
persist-tun
ca /etc/openvpn/key/ca.crt
cert /etc/openvpn/key/clientname.crt
key /etc/openvpn/key/clientname.key
tls-auth /var/etc/openvpn/key/ta.key 1
#log /var/etc/openvpn/openvpn.log
verb 5

no login and password is required match only ta.key ca.crt and client certificate. how to set ?
tnx for your help.

2

You have to use a username and password with MikroTik OVPN solutions. You can use this Wiki page as a guide:

http://wiki.mikrotik.com/wiki/OpenVPN_Configuration_Step_by_Step

3

is not possibile to use username and password because this is a client configuration.
i want set this client configuration to my microtik and route all my internal network.
the server give me olny certificate crt +ta+ca and don’t have a username and password.
in the doc not explain what use this method for connect to another server.
the configuration is a client config.
thnx in advance.

4

Unfortunetly RouterOS implementation of OVPN does not support the exclusion of username/password. Some get around this by using a dummy set across their clients.

Sorry that its not what you want to hear.

5

I have the same setup and just use a dummy user and password, the server ignores it.

6

As Barkas and I have suggested, I think your only option is to use a dummy set unfortunately.

7

Hello,

It’s my first post here in the mikrotik forum. I just bought rb2011uas-2hnd-in and faced the same problem - Linux OpenVPN server without asking for user+pass (only certs) and RB which is not happy with that. My question is:
Is there any chance Mikrotik fix that ?

Thank you in advance!

Best Regards,
Presian

8

Dear All,

It’s my first post here. I have just bought rb2011uas-2hnd-in and faced the same problem - Linux OpenVPN server which is not asking for user + password and RB which is not happy for that. My question is :

Is there any chance to workaround this, whitout changing the server configuration and is there any chance for that Mikrotik fix it in future releases ?

Best Regards,
Presian

PS : Sorry for duplicate

9

Guys I’m going crazy!
Is thare a way to connect to a VPN service (AirVPN) that require the use of the ta.key? I’m using a dummy username.
I’ve tried to import it but it doesn’t happen anything.
If I try to connect to the VPN this is the log:
00:39:43 ovpn,info AirVPN: initializing…
00:39:43 ovpn,info AirVPN: connecting…
00:39:43 ovpn,info AirVPN: terminating… - peer disconnected
00:39:43 ovpn,info AirVPN: disconnected

PLEEEEASE, how do I connect to that VPN service?
Thanks!!!