OpenVPN Support Forum

can somone please help, i cannot connect the mikrotik to the OpenVPN cloud connector, edge router was easy.

hi,
do you find a solution?
I just tryied, but it dosne't works
Any ideas?
regards
Stefamo

Hello shant and Stek,

No, it is completely impossible to connect a Mikrotik device to OpenVPN Cloud at this time. It is possible to connect it to OpenVPN Access Server but it requires some changes that are not so good for security. With OpenVPN Access Server you can run your own self-hosted OpenVPN server and whatever changes you make affect only your server. Like turning off the TLS control channel security, which is required for a Mikrotik device to be able to connect. But on OpenVPN Cloud you can't turn off TLS control channel security. This setting is always an all-or-nothing setting. You either have it enabled for all users/tenants of your OpenVPN server, or you don't. Bringing down the security of OpenVPN Cloud to a (much) lower setting just for the benefit of allowing some customers to connect Mikrotik routers that don't implement TLS control channel security is a trade-off we are not willing to make.

If you want to do it right, get a router that implements OpenVPN fully/normally so you can connect to OpenVPN Cloud or OpenVPN Access Server with TLS control channel security intact. In our documentation on our site we have examples of routers that we've tested to work with OpenVPN Cloud (and those will also work with OpenVPN Access Server). See this page for more information on supported routers:
https://openvpn.net/cloud-docs/openvpn- ... er-guides/

If you must connect Mikrotik devices then run your own self-hosted OpenVPN Access Server and disable TLS control channel security on that. Obviously we would not advise that last option for security reasons, but if you must connect Mikrotik devices, this is the way to do it. See this forum post for an explanation of how to configure Access Server and Mikrotik to talk to each other:
viewtopic.php?p=98154&hilit=mikrotik#p98063

Kind regards,
Johan

Bump - the TLS authentication is already supported by RouterOS:
1. It is not listed in Limitations section anymore here https://help.mikrotik.com/docs/display/ROS/OpenVPN
2. Tested and working on MikroTik SXT LTE running 7.15.1 - I just created the connector in CloudConnexa, downloaded the .ovpn, imported it into the Mikrotik and it works!

hello everything is fine?

Would you like to know how it worked? because I tried different ways and I couldn't. it is giving the error "AUTH_FAILED"