Hello friends
How to connect to your work network from outside the office
In this short video
I suggest you a solution with the mikrotik router
Mikrotik openvpn
Creating SSL certificate for openvpn server and client
The following steps will show how to create CA certificate in mikrotik
Click on Key Usage tab and uncheck all checkboxes except crl. sign and key cert. sign
Put MikroTik Router’s WAN IP address in CA CRL Host input field
123.25.70.1
Your sign certificate will be created within few seconds
Now we will create server certificate
The following steps will show how to create server certificate in mikrotik
Click on Key Usage tab and uncheck all checkboxes except digital signature, key encipherment and tls server
and tls server
Click on sign button
Select CA certificate from CA drop-down menu
Now we will create client certificate
The following steps will show how to create client certificate in mikrotik
Click on Key Usage tab and uncheck all checkboxes except tls client
Click on sign button
Select CA certificate from CA drop-down menu
Now we will export CA and Client certificates so that OpenVPN client can use this certificate
Click on your CA certificate and then click on Export button from right button panel
Choose your CA certificate from Certificate dropdown menu.
Click on Export button now. Your CA certificate will be exported
click on Export button from right button panel and choose your client certificate from Certificate dropdown menu
Put a password in Export Passphrase input field
The password must be at least 8 characters and this password has to provide when OpenVPN client will be connected
Drag and Drop these three files in a folder on your Desktop.
We will use these files when OpenVPN client will be configured
Now we will configure openvpn server in mikrotik router
Click on Enabled checkbox. From Certificate dropdown menu, choose server certificate that we created before
Also click on Require Client Certificate checkbox
From Auth. Panel, uncheck all checkboxes except sha1
From Cipher panel, uncheck all checkboxes except aes 256
Now we will create openvpn user who will be connected to the server
Choose ovpn from Service dropdown menu
Put the gateway IP in Local Address input field
and put a LAN IP that will be assigned in client workstation when this user will be connected,
in Remote Address input field
The following steps will show how to enable proxy-arp on the LAN interface
choose proxy-arp from ARP dropdown menu
MikroTik OpenVPN Server is now completely ready to accept OpenVPN client.
So
We will now configure openvpn client in Windows operating system
Go to openvpn.net and download openvpn client software
After downloading
Install openvpn client in your operating system
Installation process is as simple as installing other software in Windows operating system
Now copy your ca and client certificates and client key files into config directory
Create a file with the extension ovpn with the content as above
You can download the sample file in the description of this video
Here, change remote IP Address according to your MikroTik WAN IP
123.25.70.1
Save the file with the extension ovpn
Create another file named secret without any extension
and put OpenVPN PPP username at first line and password in second line and then save this file.
Now run OpenVPN client software
You will find a new icon in your Taskbar or System tray like above
Click mouse right button on this icon and then click Connect option.
OpenVPN Connection window will appear and it will ask to put your client certificate password that you have entered at the time of client certificate exportation
To check your configuration
do a ping request to any remote network workstation
If this helps don't forget to leave a like and more subscribe to my YouTube channel for more helpful video