Mainos / Advertisement:
Vie käännöksiä
Siirry navigaatioon
Siirry hakuun
Asetukset
Ryhmä
Active Directory Domain Services
Amavis
Apache2
APT
Automysqlbackup
Backup
Bashrc
Bind9
Cachet
Cellmapper
Cellmapper/Changelog
Cellmapper/FAQ
Chmod
Cisco Catalyst C2620 reititin
Cisco Catalyst C2950T-24 kytkin
Cisco IOS peruskäyttö
Cisco Router NAT/PAT
Crontab
DDNS päivitysohjelmat
Debian
Debian verkkokonfiguraatio
Debian WLAN
DHCP Server
DNS Server
Dovecot
Drupal
Etusivu
Fail2ban
File Server Resource Manager
Fstab
Gnome
Grep
Group Policy Management
Hyper-V
Inteno DG301AL
IPsec
Iptables
Irssi
Isc-dhcp-relay
Isc-dhcp-server
Isäntänimen muuttaminen
Kali Linux
Kuuluvuuskartat
Linux AD liitos
Lm-sensors
Midnight Commander
Mobiiliverkkotekniikka
Mysql
Nano
Network Policy and Access Services
Nginx
Novell NetWare
Observium
Openssl
Openvpn
Owncloud
Php5
Phpmyadmin
Port-security
Postfix
PowerShell
Pptp-linux
PPTP-serveri
Proxmox
Qemu-kvm
Roundcube
RouterOS
RouterOS bridge
RouterOS CAPsMAN
RouterOS DHCP
RouterOS Firewall
RouterOS IPTV
RouterOS IPv6
RouterOS LTE
RouterOS NAT
RouterOS OpenVPN
RouterOS Route
RouterOS VLAN
RouterOS VPN
RouterOS WLAN
RWEverything
Samba
Serial port yhteys
Server Core
Spamassassin
Squid
Ssh
Sstp-client
Staattinen IP
Sysprep
Taisto:Tietoja
Taisto:Tietosuojakäytäntö
Teamspeak3
Telia IPTV asetukset
Ubuntu Server
USB-Asennus
Verkkokaapelointi
Vesta
Vi
Vnstat
Vsftpd
VTP
Wds&dhcpd
WDS+ADK
Web Server (IIS)
Windows 8.1
Windows Deployment Services
Windows komentoja
Windows Server 2012 R2
WLAN
Wordpress
ZTE MF823D
Kieli
aa - Qafár af
ab - Аҧсшәа
abs - bahasa ambon
ace - Acèh
ady - адыгабзэ
ady-cyrl - адыгабзэ
aeb - تونسي/Tûnsî
aeb-arab - تونسي
aeb-latn - Tûnsî
af - Afrikaans
ak - Akan
aln - Gegë
am - አማርኛ
an - aragonés
ang - Ænglisc
anp - अङ्गिका
ar - العربية
arc - ܐܪܡܝܐ
arn - mapudungun
arq - جازايرية
ary - Maġribi
arz - مصرى
as - অসমীয়া
ase - American sign language
ast - asturianu
atj - Atikamekw
av - авар
avk - Kotava
awa - अवधी
ay - Aymar aru
az - azərbaycanca
azb - تۆرکجه
ba - башҡортса
ban - Basa Bali
bar - Boarisch
bbc - Batak Toba
bbc-latn - Batak Toba
bcc - جهلسری بلوچی
bcl - Bikol Central
be - беларуская
be-tarask - беларуская (тарашкевіца)
bg - български
bgn - روچ کپتین بلوچی
bh - भोजपुरी
bho - भोजपुरी
bi - Bislama
bjn - Bahasa Banjar
bm - bamanankan
bn - বাংলা
bo - བོད་ཡིག
bpy - বিষ্ণুপ্রিয়া মণিপুরী
bqi - بختیاری
br - brezhoneg
brh - Bráhuí
bs - bosanski
btm - Batak Mandailing
bto - Iriga Bicolano
bug - ᨅᨔ ᨕᨘᨁᨗ
bxr - буряад
ca - català
cbk-zam - Chavacano de Zamboanga
cdo - Mìng-dĕ̤ng-ngṳ̄
ce - нохчийн
ceb - Cebuano
ch - Chamoru
cho - Choctaw
chr - ᏣᎳᎩ
chy - Tsetsêhestâhese
ckb - کوردی
co - corsu
cps - Capiceño
cr - Nēhiyawēwin / ᓀᐦᐃᔭᐍᐏᐣ
crh - qırımtatarca
crh-cyrl - къырымтатарджа (Кирилл)
crh-latn - qırımtatarca (Latin)
cs - čeština
csb - kaszëbsczi
cu - словѣньскъ / ⰔⰎⰑⰂⰡⰐⰠⰔⰍⰟ
cv - Чӑвашла
cy - Cymraeg
da - dansk
de - Deutsch
de-at - Österreichisches Deutsch
de-ch - Schweizer Hochdeutsch
de-formal - Deutsch (Sie-Form)
din - Thuɔŋjäŋ
diq - Zazaki
dsb - dolnoserbski
dtp - Dusun Bundu-liwan
dty - डोटेली
dv - ދިވެހިބަސް
dz - ཇོང་ཁ
ee - eʋegbe
egl - Emiliàn
el - Ελληνικά
eml - emiliàn e rumagnòl
en - English
en-ca - Canadian English
en-gb - British English
eo - Esperanto
es - español
es-419 - español de América Latina
es-formal - español (formal)
et - eesti
eu - euskara
ext - estremeñu
fa - فارسی
ff - Fulfulde
fi - suomi
fit - meänkieli
fj - Na Vosa Vakaviti
fo - føroyskt
fr - français
frc - français cadien
frp - arpetan
frr - Nordfriisk
fur - furlan
fy - Frysk
ga - Gaeilge
gag - Gagauz
gan - 贛語
gan-hans - 赣语(简体)
gan-hant - 贛語(繁體)
gcr - kriyòl gwiyannen
gd - Gàidhlig
gl - galego
glk - گیلکی
gn - Avañe'ẽ
gom - गोंयची कोंकणी / Gõychi Konknni
gom-deva - गोंयची कोंकणी
gom-latn - Gõychi Konknni
gor - Bahasa Hulontalo
got - 𐌲𐌿𐍄𐌹𐍃𐌺
grc - Ἀρχαία ἑλληνικὴ
gsw - Alemannisch
gu - ગુજરાતી
gv - Gaelg
ha - Hausa
hak - 客家語/Hak-kâ-ngî
haw - Hawaiʻi
he - עברית
hi - हिन्दी
hif - Fiji Hindi
hif-latn - Fiji Hindi
hil - Ilonggo
ho - Hiri Motu
hr - hrvatski
hrx - Hunsrik
hsb - hornjoserbsce
ht - Kreyòl ayisyen
hu - magyar
hu-formal - magyar (formal)
hy - հայերեն
hyw - արեւմտահայերէն
hz - Otsiherero
ia - interlingua
id - Bahasa Indonesia
ie - Interlingue
ig - Igbo
ii - ꆇꉙ
ik - Iñupiak
ike-cans - ᐃᓄᒃᑎᑐᑦ
ike-latn - inuktitut
ilo - Ilokano
inh - ГӀалгӀай
io - Ido
is - íslenska
it - italiano
iu - ᐃᓄᒃᑎᑐᑦ/inuktitut
ja - 日本語
jam - Patois
jbo - la .lojban.
jut - jysk
jv - Basa Jawa
ka - ქართული
kaa - Qaraqalpaqsha
kab - Taqbaylit
kbd - Адыгэбзэ
kbd-cyrl - Адыгэбзэ
kbp - Kabɩyɛ
kg - Kongo
khw - کھوار
ki - Gĩkũyũ
kiu - Kırmancki
kj - Kwanyama
kjp - ဖၠုံလိက်
kk - қазақша
kk-arab - قازاقشا (تٴوتە)
kk-cn - قازاقشا (جۇنگو)
kk-cyrl - қазақша (кирил)
kk-kz - қазақша (Қазақстан)
kk-latn - qazaqşa (latın)
kk-tr - qazaqşa (Türkïya)
kl - kalaallisut
km - ភាសាខ្មែរ
kn - ಕನ್ನಡ
ko - 한국어
ko-kp - 조선말
koi - Перем Коми
kr - Kanuri
krc - къарачай-малкъар
kri - Krio
krj - Kinaray-a
krl - karjal
ks - कॉशुर / کٲشُر
ks-arab - کٲشُر
ks-deva - कॉशुर
ksh - Ripoarisch
ku - kurdî
ku-arab - كوردي (عەرەبی)
ku-latn - kurdî (latînî)
kum - къумукъ
kv - коми
kw - kernowek
ky - Кыргызча
la - Latina
lad - Ladino
lb - Lëtzebuergesch
lbe - лакку
lez - лезги
lfn - Lingua Franca Nova
lg - Luganda
li - Limburgs
lij - Ligure
liv - Līvõ kēļ
lki - لەکی
lmo - lumbaart
ln - lingála
lo - ລາວ
loz - Silozi
lrc - لۊری شومالی
lt - lietuvių
ltg - latgaļu
lus - Mizo ţawng
luz - لئری دوٙمینی
lv - latviešu
lzh - 文言
lzz - Lazuri
mai - मैथिली
map-bms - Basa Banyumasan
mdf - мокшень
mg - Malagasy
mh - Ebon
mhr - олык марий
mi - Māori
min - Baso Minangkabau
mk - македонски
ml - മലയാളം
mn - монгол
mni - মেইতেই লোন্
mnw - ဘာသာ မန်
mo - молдовеняскэ
mr - मराठी
mrj - кырык мары
ms - Bahasa Melayu
mt - Malti
mus - Mvskoke
mwl - Mirandés
my - မြန်မာဘာသာ
myv - эрзянь
mzn - مازِرونی
na - Dorerin Naoero
nah - Nāhuatl
nan - Bân-lâm-gú
nap - Napulitano
nb - norsk bokmål
nds - Plattdüütsch
nds-nl - Nedersaksies
ne - नेपाली
new - नेपाल भाषा
ng - Oshiwambo
niu - Niuē
nl - Nederlands
nl-informal - Nederlands (informeel)
nn - norsk nynorsk
no - norsk
nov - Novial
nrm - Nouormand
nso - Sesotho sa Leboa
nv - Diné bizaad
ny - Chi-Chewa
nys - Nyunga
oc - occitan
olo - Livvinkarjala
om - Oromoo
or - ଓଡ଼ିଆ
os - Ирон
pa - ਪੰਜਾਬੀ
pag - Pangasinan
pam - Kapampangan
pap - Papiamentu
pcd - Picard
pdc - Deitsch
pdt - Plautdietsch
pfl - Pälzisch
pi - पालि
pih - Norfuk / Pitkern
pl - polski
pms - Piemontèis
pnb - پنجابی
pnt - Ποντιακά
prg - Prūsiskan
ps - پښتو
pt - português
pt-br - português do Brasil
qu - Runa Simi
qug - Runa shimi
rgn - Rumagnôl
rif - Tarifit
rm - rumantsch
rmy - Romani
rn - Kirundi
ro - română
roa-tara - tarandíne
ru - русский
rue - русиньскый
rup - armãneashti
ruq - Vlăheşte
ruq-cyrl - Влахесте
ruq-latn - Vlăheşte
rw - Kinyarwanda
sa - संस्कृतम्
sah - саха тыла
sat - ᱥᱟᱱᱛᱟᱲᱤ
sc - sardu
scn - sicilianu
sco - Scots
sd - سنڌي
sdc - Sassaresu
sdh - کوردی خوارگ
se - davvisámegiella
sei - Cmique Itom
ses - Koyraboro Senni
sg - Sängö
sgs - žemaitėška
sh - srpskohrvatski / српскохрватски
shi - Tašlḥiyt/ⵜⴰⵛⵍⵃⵉⵜ
shi-latn - Tašlḥiyt
shi-tfng - ⵜⴰⵛⵍⵃⵉⵜ
shn - ၽႃႇသႃႇတႆး
shy-latn - tachawit
si - සිංහල
simple - Simple English
sk - slovenčina
skr - سرائیکی
skr-arab - سرائیکی
sl - slovenščina
sli - Schläsch
sm - Gagana Samoa
sma - Åarjelsaemien
sn - chiShona
so - Soomaaliga
sq - shqip
sr - српски / srpski
sr-ec - српски (ћирилица)
sr-el - srpski (latinica)
srn - Sranantongo
ss - SiSwati
st - Sesotho
stq - Seeltersk
sty - cебертатар
su - Basa Sunda
sv - svenska
sw - Kiswahili
szl - ślůnski
ta - தமிழ்
tay - Tayal
tcy - ತುಳು
te - తెలుగు
tet - tetun
tg - тоҷикӣ
tg-cyrl - тоҷикӣ
tg-latn - tojikī
th - ไทย
ti - ትግርኛ
tk - Türkmençe
tl - Tagalog
tly - толышә зывон
tn - Setswana
to - lea faka-Tonga
tpi - Tok Pisin
tr - Türkçe
tru - Ṫuroyo
ts - Xitsonga
tt - татарча/tatarça
tt-cyrl - татарча
tt-latn - tatarça
tum - chiTumbuka
tw - Twi
ty - reo tahiti
tyv - тыва дыл
tzm - ⵜⴰⵎⴰⵣⵉⵖⵜ
udm - удмурт
ug - ئۇيغۇرچە / Uyghurche
ug-arab - ئۇيغۇرچە
ug-latn - Uyghurche
uk - українська
ur - اردو
uz - oʻzbekcha/ўзбекча
uz-cyrl - ўзбекча
uz-latn - oʻzbekcha
ve - Tshivenda
vec - vèneto
vep - vepsän kel’
vi - Tiếng Việt
vls - West-Vlams
vmf - Mainfränkisch
vo - Volapük
vot - Vaďďa
vro - Võro
wa - walon
war - Winaray
wo - Wolof
wuu - 吴语
xal - хальмг
xh - isiXhosa
xmf - მარგალური
xsy - saisiyat
yi - ייִדיש
yo - Yorùbá
yue - 粵語
za - Vahcuengh
zea - Zeêuws
zgh - ⵜⴰⵎⴰⵣⵉⵖⵜ ⵜⴰⵏⴰⵡⴰⵢⵜ
zh - 中文
zh-cn - 中文(中国大陆)
zh-hans - 中文(简体)
zh-hant - 中文(繁體)
zh-hk - 中文(香港)
zh-mo - 中文(澳門)
zh-my - 中文(马来西亚)
zh-sg - 中文(新加坡)
zh-tw - 中文(台灣)
zu - isiZulu
qqq - Message documentation
Muoto
Vie off-line kääntämiseen soveltuvassa muodossa
Vie perusmuodossa
Hae
{{DISPLAYTITLE:RouterOS OpenVPN}}<languages/> RouterOS support OpenVPN server and client. OpenVPN is one mostly secure VPN tunnel protocol. == Server == This manual shows, how to configure Mikrotik OpenVPN Server. == Requirements / Recommendation === * SSL Root Certificate (CA) * SSL Server Certificate * SSL Client Certificate * Tested Mikrotik RB951G-2HnD and RouterOS 6.26 === How to === 1. Create SSL certificate first, example [[Openssl|OpenSSL]] and move certificate to Mikrotik with Winbox. Import Certificate key and certificate to RouterOS. /certificates import file-name=ssl.key /certificates import file-name=ssl.crt [[Tiedosto:RouterOS import ssl cert 1.png|500px]] 2. Create DHCP Pool (if you want use bridge, you can skip this step) /ip pool add name=ovpn-pool ranges=10.15.32.34-10.15.32.38 * DHCP pool name is ovpn-pool * Pool area is 10.15.32.34-10.15.32.38 3. Create routing OpenVPN network to local network (if you want use bridge mode, you can skip this step) /ip firewall nat add chain=srcnat out-interface=ether2 action=masquerade Create NAT to ether2 interface 4. Create OpenVPN Profile /ppp profile add name=openvpn local-address=10.15.32.33 remote-address=ovpn-pool * Profile name is openvpn * Local IP-address is 10.15.32.33 * VPN customer get remote IP-address from ovpn - DHCP pool. * Using bridge, please remove local-address and remote address. Add bridge, example bridge-local /ppp profile add name=openvpn_bridge bridge=bridge-local 5. Create VPN user /ppp secret add disabled=no name="openvpn" password="Qwerty1" service=any * Username: openvpn * Password: Qwerty1 * Service what can use this user: Openvpn 6. OpenVPN server configuration /interface ovpn-server server set auth=sha1, certificate=ssl_cert cipher=aes128,aes256 default-profile=openvpn enabled=yes keepalive-timeout=60 max-mtu=1500 mode=ip netmask=29 port=1194 require client-certificate=no * Authentication: SHA1 * SS Certificate: ssl-cert * SSL Chipper: AES128, AES256 * Default Profile: openvpn * Keepalive-timeout=60 * MAX-MTU (packet size): 1500 * mode=ip (if you use bridge mode, change this to ethernet) * require client-certificate=no (if you use client certificate, change value to yes) 6. Enable access from firewall /ip firewall filter add action=accept chain=input comment="OpenVPN" disabled=no dst-port=1194 protocol=tcp Create new firewall rule what accept protocol TCP port 1194 === Radius === * Lisää Mikrotikkiin Radius palvelimesi asetukset /radius alle. * Määritä palvelimelle sallituksi todennustyypit CHAP / PAP, SPAP * Määritä NAS Port tyypiksi Async. /radius add service=ppp address=10.0.0.254 secret=securepassu authentication-port=1812 accounting-port=1813 Esimerkki konfiguraatiot Windows NPS palvelimelta. [[File:RouterOS_OVPN_Radius_3.png|400px|Määritetään Domain Users ryhmälle käyttöoikeudet]] [[File:RouterOS_OVPN_Radius_2.png|400px|Määritetään NAS portin tyypiksi Async]] [[File:RouterOS_OVPN_Radius_1.png|400px|Märitetään palvelimelle sallituksi todennustyypit CHAP / PAP, SPAP]] [[Luokka:RouterOS|RouterOS OpenVPN]] [[Luokka:VPN|RouterOS OpenVPN]] == Client == === RouterOS === OpenVPN client can connect to OpenVPN server. 1. Create OpenVPN client profile to client device. /ppp profile add name=openvpn-client 2. Create new OpenVPN client: /interface ovpn-client name="openvpn-client" connect-to="server.openvpn.com" port="1194" mode="ip" user="openvpn" password="openvpn123" profile="openvpn-client" certificate="no" auth="sha1" cipher="aes128" add-default-route="no" * name = connection name * connect-to = OpenVPN Server address or IP-address * port = OpenVPN Server port what server listen * mode = ip (ethernet, if you use bridge mode on VPN server) * user = OpenVPN user * password = OpenVPN user password * profile = Profile what OpenVPN use * certificate = SSL client certificate * add-default-route = Add this VPN to default route? 3. Try connect and watch log if connection not working. === Linux === Esimerkki konfiguraatio client.ovpn: <pre> client dev tun #Voi olla tap. Tun on reitittävä ja tap on siltaava. Katso että vastaa palvelimen konfiguraatiota. proto tcp #Tai udp, RouterOS ei tue UDP:nä. resolv-retry infinite nobind remote vpn.example.org 1194 # Etä OpenVPN palvelimen osoite tai IP-osoite sekä portti #Lisää tähän rootCA jonka olet luonut, avaa se ja kopioi sisältö <ca> -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- </ca> #Lisää tähän asiakas sertifikaatin jonka olet luonut. <cert> -----BEGIN CERTIFICATE----- -----END CERTIFICATE----- </cert> #Lisää tähän asiakkaan sertifikaatin privaatti avaimen. <key> -----BEGIN PRIVATE KEY----- -----END PRIVATE KEY----- </key> tls-client port 1194 #Portti jota palvelin kuuntelee user nobody group nogroup #comp-lzo # Do not use compression. It doesn't work with RouterOS (at least up to RouterOS 3.0rc9) # More reliable detection when a system loses its connection. ping 15 ping-restart 10 ping-timer-rem persist-tun persist-key # Silence the output of replay warnings, which are a common false # alarm on WiFi networks. This option preserves the security of # the replay protection code without the verbosity associated with # warnings about duplicate packets. mute-replay-warnings # Verbosity level. # 0 = quiet, 1 = mostly quiet, 3 = medium output, 9 = verbose verb 3 cipher AES-256-CBC auth SHA1 pull route-nopull #Verkot jotka reititetään VPN verkkoon route 192.168.1.0 255.255.255.0 push "dhcp-option DNS 8.8.8.8" #DNS palvelin jota käytetään #redirect-gateway def1 #Haluatko reitittää kaikki VPN kautta? Ota tästä risuaita pois #Salasana tiedosto auth-user-pass auth.cfg </pre> auth.cfg tiedoston tulisi sisältää käyttäjänimen (username) ja salasananan (password) <pre> username password </pre> [[Category:RouterOS]] [[Category:VPN]] [[Luokka:RouterOS|RouterOS OpenVPN]] [[Luokka:VPN|RouterOS OpenVPN]]
Mainos / Advertisement:
Navigointivalikko
Henkilökohtaiset työkalut
suomi
Kirjaudu sisään
Nimiavaruudet
Toimintosivu
Kirjoitusjärjestelmät
Näkymät
Muut
Haku
Valikko
Etusivu
Ajankohtaista
Tuoreet muutokset
Satunnainen sivu
Ohje
Työkalut
Toimintosivut
Tulostettava versio