Procedura Passo Passo
#mikrotik #routerboard #openvpn #server
Routerboard 951: https://amzn.to/3pvpXK7
/certificate
add name=ca-template common-name=VOSTRODDNS days-valid=3650 key-size=4096 key-usage=crl-sign,key-cert-sign
add name=server-template common-name=server.VOSTRODDNS days-valid=3650 key-size=4096 key-usage=digital-signature,key-encipherment,tls-server
add name=client-template common-name=client.VOSTRODDNS days-valid=3650 key-size=4096 key-usage=tls-client
FIRMA CERTIFICATI
/certificate
sign ca-template name=ca-certificate
sign server-template name=server-certificate ca=ca-certificate
sign client-template name=client-certificate ca=ca-certificate
ESPORTAZIONE CERTIFICATI
/certificate
export-certificate ca-certificate export-passphrase=””
export-certificate client-certificate export-passphrase=VOSTRAPASSWORD
-CONFIGURAZIONE FILE .OVPN PER IL CLIENT (con notepad):
client
dev tun
proto tcp
remote VOSTRODDNS 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
cipher AES-128-CBC
auth SHA1
auth-user-pass
redirect-gateway def1
verb 3