Hi guys,

Recently I bought MikroTik hAP ac^3 RBD53iG-5HacD2Hnd currently running the latest beta release of RouterOS v7 with the idea to setup OpenVPN server and connect to my home network remotely. I would like to route all my traffic over the VPN tunnel also.
So far I have set up several OpenVPN servers on pfsense and DDWRT, but in RouterOS I’m a bit confused.

Can someone give me a link with documentation or explain me how OpenVPN is integrated in RouterOS? To be honest I find it quite different comparing to other systems I’ve used.

Can I set up multiple OpenVPN servers (TUN and TAP)?
Can I configure the server to authenticate clients with certificates only, no username password?
Can I export client certificate and key (generated by RouterOS) without any password?
Can I run OpenVPN server without binding it to any user?
Can I use hardware crypto engine (AES-NI) with OpenVPN?

And more questions are on top of my head, due to lack of documentation.

I’ll be very happy if you share some details regarding this.

Kind Regards and stay safe,
Nikolay

No.
No.
Yes.
Yes.
No.

Hi mrz,

Thank you for your answer. I'll be expecting any further replies in boolean form :)

Kind Regards,
Nikolay

Reminds me of this: https://youtu.be/7BKqlZf9pUQ?t=19

True

Hi guys,

I'll use this topic to explain my problems with my OpenVPN configuration.

Here is a summary of my configuration:

OpenVPN server running in ehternet mode, tcp protocol on port 1194 with netmask /24. One user with username and password trying to get an IP from my local DHCP server (I'm trying to achieve an OpenVPN bridge with my LAN).

My LAN is 192.168.88.0/24;
In PPP under Secrets I've created a client with Remote Address 192.168.88.10, the rest is by default;
In PPP under Profiles I've created an OpenVPN profile with local address 192.168.88.1 and bridge interface with my LAN bridge, the rest is by default;
My OpenVPN server is dynamic interface, comes up only when a user is connected;
One firewall rule to accept connection on port 1194 on my WAN;

I noticed, that after sucessfull connection via OpenVPN and full access to my LAN(no problems there) in the WebFig IP/Addresses there is a new dynamic network 192.168.88.1/32 right after my LAN network 192.168.88.1/24. That gives me an impression that OpenVPN server is creating a separate network with same IP range just for my client, which might be a conflict, rather than using my LAN network and get an IP from DHCP server.
Also my OpenVPN speed via my tunnel is twice slow compairing to my ISP provided speed (ISP gives me 50mbit/50mbit and over my OpenVPN tunnel I get max 15mbit download and 20 mbit upload speeds).
Tested this config on different OpenVPN server and I get full speeds (no issue with my Client hardware).

Can you please advise me, how can I bridge my LAN with my OpenVPN server in order to have only one local network /24 and all IP to be leased from my LAN DHCP server via OpenVPN tunnel?

Kind Regards,
Nikolay

You could write 00110 :-)

No.
No.
Yes.
Yes.
No.

You could write 00110 :-)

No.
No.
Yes.
Yes.
No.

But would it be little or big endian?

You could write 00110 :-)

No.
No.
Yes.
Yes.
No.

But would it be little or big endian?

Funny, it does not matter :-D