I have quite a lot of Mikrotik routers (various models) set up as openvpn servers with no issues. Today I set up a CCR2004 with fw 7.17.2 as I did for the others. I have connected to it from my Linux client, and got a lot of errors like this: AEAD Decrypt error: cipher final failed I have run some t...

*) ovpn - disable hardware accelerator for GCM on Alpine CPUs (introduced in v7.17);

I suppose this is why using GCM on a CCR2004 with 7.17.2 I get a lot of "AEAD Decrypt error: cipher final failed"?

Thanks Mikrotik for adding the push route configuration, I'm now using it. Next step, please consider adding a generic push configuration option. :-) In my opinion it should be quite easy to set up a generic text field where I can write all of the options I want to push to the clients, because the o...

I've been testing DNS Adlist for my home router, and it works fine, but I'm having issues with my wife's iphone. When Safari loads a web site that tries to load parts from some of the blocked domains in Adlist, it gets a 0.0.0.0 as ip address, which is how adlist works. The issue is that then Safari...

Just notice push route is in the ovpn server setting not per secret/user basis? I hope MT would make it more flexible Yes, openvpn in Linux is still far more flexible, with CCD and the ability to push any configuration, not only routes. Still it's progressing quite fast on Mikrotik, so I hope it wi...

I'm happy with the general Openvpn improvements in ROS, still it has a limitation that makes a scenario with multiple mobile clients (one of the main uses for Openvpn) hard to manage: I cannot push openvpn parameters (mostly routes) to the clients from a Mikrotik server. This makes it hard to manage...

Necroposting on this thread just to say that ROS 7.6 still limits certificate validity to 2038, it seems.

Yes, OPENVPN UDP!

I am trying to set up my test access point to have wireless users authenticated with the so called "WPA Enterprise", using the internal User Manager as radius server. I have been unable to set up something that works. The wireless client asks for username and password on connection, then t...

Sure you helped me! I wonder WHY I can access an URL that only seems to work, but it does not.


Thanks a lot!

I am a new Mikrotik user and I am trying to set up user manager for the first time on a RouterBoard751G with level 4 licence. I have installed the user manager and I can connect to it on <my router ip>/usermgr, but I cannot login using default user "admin" with empty password. I always get...