Does mikrotik support OpenVPN cloud connector?
-
- OpenVpn Newbie
- Posts: 1
- Joined: Sun Feb 27, 2022 6:26 am
Does mikrotik support OpenVPN cloud connector?
can somone please help, i cannot connect the mikrotik to the OpenVPN cloud connector, edge router was easy.
-
- OpenVpn Newbie
- Posts: 1
- Joined: Fri May 27, 2022 6:38 pm
Re: Does mikrotik support OpenVPN cloud connector?
hi,
do you find a solution?
I just tryied, but it dosne't works
Any ideas?
regards
Stefamo
do you find a solution?
I just tryied, but it dosne't works
Any ideas?
regards
Stefamo
- openvpn_inc
- OpenVPN Inc.
- Posts: 1332
- Joined: Tue Feb 16, 2021 10:41 am
Re: Does mikrotik support OpenVPN cloud connector?
Hello shant and Stek,
No, it is completely impossible to connect a Mikrotik device to OpenVPN Cloud at this time. It is possible to connect it to OpenVPN Access Server but it requires some changes that are not so good for security. With OpenVPN Access Server you can run your own self-hosted OpenVPN server and whatever changes you make affect only your server. Like turning off the TLS control channel security, which is required for a Mikrotik device to be able to connect. But on OpenVPN Cloud you can't turn off TLS control channel security. This setting is always an all-or-nothing setting. You either have it enabled for all users/tenants of your OpenVPN server, or you don't. Bringing down the security of OpenVPN Cloud to a (much) lower setting just for the benefit of allowing some customers to connect Mikrotik routers that don't implement TLS control channel security is a trade-off we are not willing to make.
If you want to do it right, get a router that implements OpenVPN fully/normally so you can connect to OpenVPN Cloud or OpenVPN Access Server with TLS control channel security intact. In our documentation on our site we have examples of routers that we've tested to work with OpenVPN Cloud (and those will also work with OpenVPN Access Server). See this page for more information on supported routers:
https://openvpn.net/cloud-docs/openvpn- ... er-guides/
If you must connect Mikrotik devices then run your own self-hosted OpenVPN Access Server and disable TLS control channel security on that. Obviously we would not advise that last option for security reasons, but if you must connect Mikrotik devices, this is the way to do it. See this forum post for an explanation of how to configure Access Server and Mikrotik to talk to each other:
viewtopic.php?p=98154&hilit=mikrotik#p98063
Kind regards,
Johan
No, it is completely impossible to connect a Mikrotik device to OpenVPN Cloud at this time. It is possible to connect it to OpenVPN Access Server but it requires some changes that are not so good for security. With OpenVPN Access Server you can run your own self-hosted OpenVPN server and whatever changes you make affect only your server. Like turning off the TLS control channel security, which is required for a Mikrotik device to be able to connect. But on OpenVPN Cloud you can't turn off TLS control channel security. This setting is always an all-or-nothing setting. You either have it enabled for all users/tenants of your OpenVPN server, or you don't. Bringing down the security of OpenVPN Cloud to a (much) lower setting just for the benefit of allowing some customers to connect Mikrotik routers that don't implement TLS control channel security is a trade-off we are not willing to make.
If you want to do it right, get a router that implements OpenVPN fully/normally so you can connect to OpenVPN Cloud or OpenVPN Access Server with TLS control channel security intact. In our documentation on our site we have examples of routers that we've tested to work with OpenVPN Cloud (and those will also work with OpenVPN Access Server). See this page for more information on supported routers:
https://openvpn.net/cloud-docs/openvpn- ... er-guides/
If you must connect Mikrotik devices then run your own self-hosted OpenVPN Access Server and disable TLS control channel security on that. Obviously we would not advise that last option for security reasons, but if you must connect Mikrotik devices, this is the way to do it. See this forum post for an explanation of how to configure Access Server and Mikrotik to talk to each other:
viewtopic.php?p=98154&hilit=mikrotik#p98063
Kind regards,
Johan
OpenVPN Inc.
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
Answers provided by OpenVPN Inc. staff members here are provided on a voluntary best-effort basis, and no rights can be claimed on the basis of answers posted in this public forum. If you wish to get official support from OpenVPN Inc. please use the official support ticket system: https://openvpn.net/support
-
- OpenVpn Newbie
- Posts: 1
- Joined: Fri Jun 21, 2024 8:16 am
Re: Does mikrotik support OpenVPN cloud connector?
Bump - the TLS authentication is already supported by RouterOS:
1. It is not listed in Limitations section anymore here https://help.mikrotik.com/docs/display/ROS/OpenVPN
2. Tested and working on MikroTik SXT LTE running 7.15.1 - I just created the connector in CloudConnexa, downloaded the .ovpn, imported it into the Mikrotik and it works!
1. It is not listed in Limitations section anymore here https://help.mikrotik.com/docs/display/ROS/OpenVPN
2. Tested and working on MikroTik SXT LTE running 7.15.1 - I just created the connector in CloudConnexa, downloaded the .ovpn, imported it into the Mikrotik and it works!