vpn router Mikrotik
- 3. Welcome to this Workshop! First, some basic concepts about encryption …..
- 4. • As you know, to unlock or even lock anything like a door you need a key. • This applies to computer networks, too. • There are two encryption methods in computer networks. Symmetric Encryption Asymmetric Encryption
- 5. One of the most common Asymmetric Encryption methods is using computer certificates. In this method, we need to provide a certificate from a well-known Certificate Authority (CA) and import it to our "Local Computer Personal Certificate Store”. After importing, we can use it to encrypt and sign our data. *Note: you should have your CA, public key certificate in your “Trusted Certificate Authority” list.
- 6. How certificates work and help us to encrypt our data in “HTTPS-(SSL)” communications…
- 8. Let`s go to implementing SSTP & OVPN on our MikroTik RouterBoard as a Server and Microsoft Windows as a Client ……
- 9. Imagine that our Network Topology is:
- 10. • First, basic configurations are set, including IP address, MikroTik identity (Name), admin password, …. • Then, as a first step of implementation, we should configure SNTP and MikroTik Clock, because validity time is very important in issuing and using a certificate. (See next slide)
- 11. Configuring MikroTik Clock & SNTP Settings
- 12. • Now as a second step, we need to create a CA Certificate and issue a certificate for our SSTP and OVPN Server and finally sign it with our CA Certificate. • After that we should export CA Public Key to import it to our client’s “Trusted Root Certification Authorities” List. (See next slides)
- 13. Providing CA & Server Certificates
- 15. Exporting CA Public Key
- 16. Importing CA Public Key to Client Local Certificate Store (Trusted Root Certification Authorities List)
- 17. • Now as a third step, we should create an IP Pool, a PPP Profile and PPP Secret which should be used with Server Certificate in Configurations after enabling SSTP and OVPN. • Finally, in Server Configurations, we should enable “ARP Proxy” on our MikroTik Router “Local Network” Interface. • It’s required to remotely access Local Network. (See next slides)
- 18. Providing Same “IP Pool” for SSTP & OVPN Clients
- 19. Creating “PPP Profile” for SSTP & OVPN Connections
- 20. Creating “PPP Secret” for SSTP & OVPN Connections
- 21. Enabling & Configuring SSTP Server
- 22. Enabling & Configuring OVPN Server
- 23. Enabling “ARP Proxy” on Local Interface
- 24. • After all server configurations are completed, we should configure the client side. • To configure a Microsoft Windows operating system as a SSTP Client, a VPN connection should first be created and “VPN type” should be changed to “SSTP”. • To configure a Microsoft Windows operating system as an “OVPN Client”, some OVPN client applications such as “OPEN VPN GUI” should be installed and then provide a Config File that includes client configurations and finally use it to connect to your OVPN server. *Tip: (You can use Sample Configuration file that is located in "sample-config" folder and modify it according to your server configurations. (See next slides)
- 25. Configuring SSTP Client on Microsoft Windows
- 26. Connecting to the MikroTik SSTP Server
- 27. Connecting to the MikroTik OVPN Server
- 29. Thank You! Powered by: Pooria Taabbodi ptaabodi@hotmail.com