Ovpn client - Anonine

Hello,

I am a new user of Mikrotik, Xlite.

I am trying to setup the router as ovpn client towords Anonine but cannot get it to work.

I have downloaded file “ca.crt” and imported it in Winbox then pointed to that certificate under ovpn client settings.

However when i connect i get TLS failure.

In available .ovpn files from Anonine it states:

client
dev tun
proto udp
; Cert
ns-cert-type server
cipher BF-CBC
;Host
resolv-retry infinite
;auth
auth-user-pass
keepalive 10 30
sndbuf 0
rcvbuf 0

remote se-ovpn.anonine.net 1194
persist-key
persist-tun
persist-remote-ip
nobind
comp-lzo
verb 2

And the ca.crt contains only the certificate.

Is there any way to get this to work?
If not, is there any plants on getting ovpn tls / lzo compression support in routeros?

Regards,
Cristian

No, there is no way to get this working.
OpenVPN on the MikroTik does not support “proto udp” and no compression either.

Im also interested!

Is there any plan to include this in RouterOS?

There’s plan for UDP. Supposedly they already have it working. The last info was that it will be in RouterOS v7. The trouble is, as it looks now, RouterOS v7 will come out around the same time as world peace, so don’t hold your breath. I’m not exactly sure why it should wait for RouterOS v7, it doesn’t sound like anything that couldn’t work with v6.

My understanding is that RouterOS v6 does not use the opensource OpenVPN program but uses an own re-implementation.
Maybe RouterOS v7 uses the official implementation and they do not want to spend effort on doing that for v6 as well?

Frankly, I believe that it may still take a long time before there is v7 when it is done the way it is announced until now.
(re-write of major part of the software, solution for many different limitations, all in one go)

But no matter if it’s own version or official one, it should be “just another server”, i.e. fairly independent user-space stuff and relatively easy to replace. Ok, I may of course be wrong, but it would definitely make no sense to hold it back for v7 just because.

Problem with v7 is that we’re waiting for it for too long already. Expectations are high and even if MikroTik manages to make it phenomenally good, it will still be dissapointment for many, because there’s no way they could add everything people want, even if they spent another X years on it. So when possible, new features should go to v6, to keep people happy with small steps.

Ok, i just bought my first mikrotik router and it seems really capable to me right now. The only thing that im missing is full support for OpenVPN. I will corss my fingers and wait for version 7 :slight_smile:

I do not understand why it is not using the official software, as that would avoid a lot of compatability problems and would make it much easier to merge new features as they are made available in the official version (just upgrade the software).
I am using official OpenVPN on a server and it works really troublefree. Ok there are silly limitations there as well (like: only UDP OR TCP support, not both at the same time), but they would be easy to defend as everyone can read that in their documentation.
There may be a licensing issue, I have not investigated that.

Problem with v7 is that we’re waiting for it for too long already. Expectations are high and even if MikroTik manages to make it phenomenally good, it will still be dissapointment for many, because there’s no way they could add everything people want, even if they spent another X years on it. So when possible, new features should go to v6, to keep people happy with small steps.

RouterOS v7 is becoming the Longhorn (Windows Vista) of MikroTik!
IMHO there should be made a base release that includes the new kernel and other infrastructure changes they planned, and all that special software that supposedly will solve all problems (like OpenVPN, BGP/OSPF router software etc) should be split off into new subreleases or even independent packages. That way, the testing can be incremental and people can decide if they want to switch at a time depending on their most wanted features.