Hi @ all,
I’m new with Mikrotik, I think that this product is wonderful. Great work to developer.
I’m tryng to use IPsec Vpn on my iPhone in order to connect to router, but I’m not an expert so I’m here 
.
Following the pdf instruction by Apple, iPhone can use Hybrid mode e full certificate mode in order to establish a vpn connection:
Hybrid authentication where the server provides a certificate and the client provides
a pre-shared key for IPSec authentication; user authentication is required via xauth.
User authentication is provided via xauth and includes the following authentication
methods:
- User name with password
- RSA SecurID
- CryptoCard
Client and server certificates for IPSec authentication with optional user
authentication via xauth
I want a connection VPN on demand that is possible only with client and server certificates scenario.
So, I think I’ll have to create certificates, CA and router certificate signed by my CA.
CA certificate:
openssl genrsa -des3 -out CA.key 1024
openssl req -new -x509 -nodes -sha1 -days 365 -key CA.key -out CA.crt
this certificate must be imported on iPhone in order to trust the router certificate (I think)
Router OS certificate:
openssl genrsa -des3 -out RouterOS.key 1024
openssl req -new -key RouterOS.key -out RouterOS.csr
Sign of RouterOS certificate:
openssl ca -in RouterOS.csr -cert CA.crt -keyfile CA.key -out RouterOS.crt
Ok now the certificate are ready.
Is correct for now?
And the RouterOS? What’s command I’ll have to do?
Thanks in advance,
Andrea