VPN and how to install/configure

RouterOS General
1

Hello,

I hope someone can help me :slight_smile:

I have this Router https://mikrotik.com/product/RB2011UiAS-IN i get Internet from my cable provider this cable is connected to my Mikrotik Router.

On the Mikrotik Router i have connected per wire my Laptop, Fire TV Box, and another Fire TV Box which my brother is using.

We have also Wlan function for Internetradio and Handy connectivity.

So my question is i will subscribe to VyPrVPN what have i to do? install VPN on my Laptop? but what happens if my Laptop is not online? Can i then hear Internetradio or watch a stream?

Or do i have to install or setup this service on my Router? Also i friend tells me that i will loose speed if i use a VPN is that right?

I have a 50MBit connection.

thank you in advance ps: i hope i explained it well english is not my mother language, mother language is Greek,German

2

Hello, if you want all your devices to go through the VPN; then you will need to configure the VPN on Mikrotik RouterOS.
But if only your laptop needs to go out through the VPN, you configure the laptop to VPN.

According to the VyprVPN website there is no speed limit, so theoretically you will not lose speed.

I hope I’ve helped

3

thank you

now i have to search a howto configure this on my Mikrotik Router :frowning:

iam not a professional

PS: if i get it done on my Router can i if i was not ok with VPN go back to my old Setup easy???

4

Sure you can go back, just remember what you changed. :slight_smile:

I can give you small hint, I looked at their website and they offer PPTP, L2TP/IPsec, OpenVPN, some custom OpenVPN-based protocol, and not much advertised IKEv2 IPsec. RouterOS in theory supports all except the custom one. But you can forget about OpenVPN right away, because implementation in RouterOS is limited and not compatible with options they use. With IKEv2, I don’t know. PPTP should work for sure, because there aren’t any variations. But better aim for L2TP/IPsec, because PPTP is a little outdated.

5

thank you for the Tip :slight_smile:

6

If I may, it is safer to let the machine remember the working configuration than to remember yourself what you’ve changed. So do a

/system backup save name=flash/something_explanatory_date_versionNumber

each time you reach some satisfactory configuration before venturing into firther changes, and you can always do a

/system backup load name=flash/something_explanatory_date_versionNumber

if you need to restore a working state.

The ****

flash/

part of the file name is important - without it, the backup would be saved to a ramdisk, so it would not survive a reboot.

Another good tip is to use the “safe mode”. Before you do anything which might cut you off the router, activate safe mode. If you cut yourself, never mind, wait about a minute and you can connect again, as all changes made since you’ve entered the safe mode will be reverted when the management connection breaks. If you don’t cut yourself, switch the safe mode off to make the changes permanent, and then eventually switch it on again if you need to do another dangerous or uncertain steps.

7

Also copy those backup files as per @sindy’s post to local pc. this can be used then should you need to hardware rest the device, you still have these files to copy back to router and do the restores

8

Hello,

so how does the code look if i will safe the config to my Laptop???

9

Configuration backups are compressed and ciphered (unless you prohibit the ciphering, but they are hard to read even unciphered), but they can be restored easily as the restore process rewrites any existing configuration.

Configuration exports (

/export file=flash/some-file-name

) are easy to read because they are normal text files internally (don’t worry about the .rsc suffix), but they cannot be directly restored over a non-empty existing configuration because they would attempt to add duplicates of already existing items causing conflicts and interruption of the import process.