https://wiki.cless.pro/index.php?action=history&feed=atom&title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B 2026-10-23T02:06:01Z История изменений этой страницы в вики MediaWiki 1.36.2 https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=553&oldid=prev 2022-03-20T09:00:27Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 09:00, 20 марта 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l148">Строка 148:</td> <td colspan="2" class="diff-lineno">Строка 148:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   - если пользователь НЕ входит в группу Администраторы, то при запуске от имени Администратора требуется пароль Администратора</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>   - если пользователь НЕ входит в группу Администраторы, то при запуске от имени Администратора требуется пароль Администратора</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">   </del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Клиент OpenVPN Linux (Centos 7) ===</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>=== Клиент OpenVPN Linux (Centos 7) ===</div></td></tr> </table>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=552&oldid=prev 2022-03-20T08:58:24Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 08:58, 20 марта 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l33">Строка 33:</td> <td colspan="2" class="diff-lineno">Строка 33:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Добавляем пользователя</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Добавляем пользователя</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>/ppp secret add name=ovpn-user-1 password=P@ssword1 service=ovpn profile=OVPN_server</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/ppp secret add name=ovpn-user-1 password=P@ssword1 service=ovpn profile=OVPN_server<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== Вариант 1. Не использовать сертификаты клиентов ====</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>==== Вариант 1. Не использовать сертификаты клиентов ====</div></td></tr> </table>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=550&oldid=prev 2022-03-20T08:56:00Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 08:56, 20 марта 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l67">Строка 67:</td> <td colspan="2" class="diff-lineno">Строка 67:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;/certificate export-certificate client-ovpn-1 export-passphrase=&lt;private-key-password1&gt;&lt;/code&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;/certificate export-certificate client-ovpn-1 export-passphrase=&lt;private-key-password1&gt;&lt;/code&gt;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>Будет создано 2 файла: cert_export_client-ovpn-1.crt, cert_export_client-ovpn-1.key</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>Будет создано 2 файла: <ins style="font-weight: bold; text-decoration: none;">'''</ins>cert_export_client-ovpn-1.crt<ins style="font-weight: bold; text-decoration: none;">'''</ins>, <ins style="font-weight: bold; text-decoration: none;">'''</ins>cert_export_client-ovpn-1.key<ins style="font-weight: bold; text-decoration: none;">'''</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Копируем их на машину клиента</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Копируем их на машину клиента</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l109">Строка 109:</td> <td colspan="2" class="diff-lineno">Строка 109:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>         &lt;СЮДА КОПИРУЕМ СОДЕРЖИМОЕ export_CA.crt, ЭКСПОРТИРОВАННОГО ИЗ MIKROTIK-OVPN-SERVER&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>         &lt;СЮДА КОПИРУЕМ СОДЕРЖИМОЕ export_CA.crt, ЭКСПОРТИРОВАННОГО ИЗ MIKROTIK-OVPN-SERVER&gt;</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  &lt;/ca&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>  &lt;/ca&gt;</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;"></del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;auth.txt&lt;/code&gt;</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>&lt;code&gt;auth.txt&lt;/code&gt;</div></td></tr> <tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l218">Строка 218:</td> <td colspan="2" class="diff-lineno">Строка 217:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- импортируем файл '''client.ovpn'''</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- импортируем файл '''client.ovpn'''</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>- вводим лог/пас пользователя</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>- вводим <ins style="font-weight: bold; text-decoration: none;">'''</ins>лог/пас<ins style="font-weight: bold; text-decoration: none;">''' </ins>пользователя</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- подключаемся</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- подключаемся</div></td></tr> </table>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=549&oldid=prev 2022-03-20T08:54:26Z

<p></p> <a href="https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&amp;diff=549&amp;oldid=548">Внесённые изменения</a>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=548&oldid=prev 2022-03-20T08:42:41Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 08:42, 20 марта 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l35">Строка 35:</td> <td colspan="2" class="diff-lineno">Строка 35:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>/ppp secret add name=ovpn-user-1 password=P@ssword1 service=ovpn profile=OVPN_server</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>/ppp secret add name=ovpn-user-1 password=P@ssword1 service=ovpn profile=OVPN_server</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==== Вариант 1. Не использовать сертификаты клиентов ====</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Включаем OVPN-сервер</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>Включаем OVPN-сервер</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>/<del style="font-weight: bold; text-decoration: none;">/ НЕ ТРЕБУЕТСЯ использовать сертификаты клиентов (клиент будет подключаться ТОЛЬКО с логином/паролем) </del>- require-client-certificate=no</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">interface ovpn-server server set certificate=srv</ins>-<ins style="font-weight: bold; text-decoration: none;">OVPN cipher=blowfish128,aes128,aes192,aes256 enabled=yes port=1101 </ins>require-client-certificate=no<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">&lt;nowiki&gt;#&lt;/nowiki&gt;/interface ovpn-server server set auth=sha1 cipher=blowfish128,aes256 default-profile=OVPN_server mode=ip netmask=24 require-client-certificate=no certificate=srv-OVPN enabled=yes</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Экспорт сертификата CA:</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>/<del style="font-weight: bold; text-decoration: none;">interface ovpn</del>-<del style="font-weight: bold; text-decoration: none;">server server set </del>certificate<del style="font-weight: bold; text-decoration: none;">=srv</del>-<del style="font-weight: bold; text-decoration: none;">OVPN cipher</del>=<del style="font-weight: bold; text-decoration: none;">blowfish128,aes128,aes192,aes256 enabled=yes port=1101 require-client-certificate=no</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">certificate export</ins>-certificate <ins style="font-weight: bold; text-decoration: none;">CA export</ins>-<ins style="font-weight: bold; text-decoration: none;">passphrase</ins>=<ins style="font-weight: bold; text-decoration: none;">&quot;&quot;&lt;/code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">// ВАРИАНТ 1:</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Получается файл '''export_CA.crt''' на микроте</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">// НЕ ИСПОЛЬЗОВАТЬ СЕРТИФИКАТЫ КЛИЕНТОВ</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Извлекаем полученный файл сертификата '''export_CA.crt''' из микротика любым удобным способом</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">// ---</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">==== Вариант 2. Использовать сертификаты клиентов ====</ins></div></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Экспорт сертификата CA:</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>// <del style="font-weight: bold; text-decoration: none;">Экспорт сертификатов для настройки клиентов:</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">certificate export-certificate CA export-passphrase=&quot;&quot;&lt;</ins>/<ins style="font-weight: bold; text-decoration: none;">code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">// Экспорт сертификата CA:</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Сертификат первого клиента</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>/certificate <del style="font-weight: bold; text-decoration: none;">export</del>-<del style="font-weight: bold; text-decoration: none;">certificate CA export</del>-<del style="font-weight: bold; text-decoration: none;">passphrase</del>=&quot;&quot;</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/certificate <ins style="font-weight: bold; text-decoration: none;">add name=template-CL-to-issue copy-from=&quot;template</ins>-<ins style="font-weight: bold; text-decoration: none;">CL&quot; common</ins>-<ins style="font-weight: bold; text-decoration: none;">name</ins>=&quot;<ins style="font-weight: bold; text-decoration: none;">client-ovpn-1</ins>&quot;<ins style="font-weight: bold; text-decoration: none;">&lt;/code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>// <del style="font-weight: bold; text-decoration: none;">получается файл export_CA.crt на микроте</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">certificate sign template-CL-to-issue ca=&quot;CA&quot; name=&quot;client-ovpn-1&quot;&lt;</ins>/<ins style="font-weight: bold; text-decoration: none;">code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">// Извлекаем полученный файл сертификата из микротика любым удобным способом.</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">В будущем, для отзыва сертификатов используем команду:</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  </del>// <del style="font-weight: bold; text-decoration: none;">ВАРИАНТ 2:</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">certificate issued-revoke %cert-name%&lt;</ins>/<ins style="font-weight: bold; text-decoration: none;">code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // ИСПОЛЬЗОВАНИЕ СЕРТИФИКАТОВ КЛИЕНТОВ</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Экспорт сертификата и ключа клиента</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /</del>/ ---</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">&lt;code&gt;</ins>/<ins style="font-weight: bold; text-decoration: none;">certificate export-certificate client-ovpn-1 export</ins>-<ins style="font-weight: bold; text-decoration: none;">passphrase=&lt;private</ins>-<ins style="font-weight: bold; text-decoration: none;">key</ins>-<ins style="font-weight: bold; text-decoration: none;">password1&gt;&lt;/code&gt;</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // Экспорт сертификата CA</del>:</div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Будет создано 2 файла</ins>: <ins style="font-weight: bold; text-decoration: none;">cert_export_client-ovpn-1.crt, cert_export_client-ovpn-1.key</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /certificate export-certificate CA export-passphrase=&quot;&quot;</del></div></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Копируем </ins>их на машину клиента</div></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // Сертификат первого клиента:</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /certificate add name=template-CL-to-issue copy-from=&quot;template-CL&quot; common-name=&quot;client-ovpn-1&quot;</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /certificate sign template-CL-to-issue ca=&quot;CA&quot; name=&quot;client-ovpn-1&quot;</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // В будущем, для отзыва сертификатов используем команду:</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /certificate issued-revoke %cert-name%</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // Экспорт сертификата и ключа клиента:</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  /certificate export-certificate client-ovpn-1 export-passphrase=&lt;private-key-password1&gt;</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // будет создано 2 файла: cert_export_client-ovpn-1.crt, cert_export_client-ovpn-1.key</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">  // копируем </del>их на машину клиента</div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">КЛИЕНТ OVPN WINDOWS</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div> </div></td><td colspan="2"></td></tr> <tr><td class="diff-marker" data-marker="−"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div><del style="font-weight: bold; text-decoration: none;">&lt;nowiki&gt;-------------------&lt;/nowiki&gt;</del></div></td><td colspan="2"></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">=== Клиент OpenVPN Windows ===</ins></div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>OPENVPN УСТАНОВОЧНЫЙ:</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>OPENVPN УСТАНОВОЧНЫЙ:</div></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> </table>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=547&oldid=prev 2022-03-20T08:28:18Z

<p></p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="ru"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Предыдущая</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Версия 08:28, 20 марта 2022</td> </tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l358">Строка 358:</td> <td colspan="2" class="diff-lineno">Строка 358:</td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><br/></td></tr> <tr><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- подключаемся</div></td><td class="diff-marker"></td><td style="background-color: #f8f9fa; color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #eaecf0; vertical-align: top; white-space: pre-wrap;"><div>- подключаемся</div></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Категория:Mikrotik]]</ins></div></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">[[Категория:OpenVPN]]</ins></div></td></tr> <tr><td colspan="2"></td><td class="diff-marker" data-marker="+"></td><td style="color: #202122; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">__ОБЯЗАТЕЛЬНОЕ_ОГЛАВЛЕНИЕ__</ins></div></td></tr> </table>

Cless https://wiki.cless.pro/index.php?title=Mikrotik._OpenVPN._%D0%A1%D0%B5%D1%80%D0%B2%D0%B5%D1%80_Mikrotik_OpenVPN_%D0%B8_%D0%BA%D0%BB%D0%B8%D0%B5%D0%BD%D1%82%D1%8B&diff=546&oldid=prev 2022-03-20T08:27:39Z

<p>Новая страница: «== Настройка OpenVPN сервера Mikrotik == Сертификат CA &lt;code&gt;/certificate add name=template-CA country=&quot;&quot; state=&quot;&quot; locality=&quot;&quot; organiza...»</p> <p><b>Новая страница</b></p><div>== Настройка OpenVPN сервера Mikrotik ==<br /> Сертификат CA<br /> <br /> &lt;code&gt;/certificate add name=template-CA country=&quot;&quot; state=&quot;&quot; locality=&quot;&quot; organization=&quot;&quot; unit=&quot;&quot; common-name=&quot;CA&quot; key-size=4096 days-valid=3650 key-usage=crl-sign,key-cert-sign&lt;/code&gt;<br /> <br /> &lt;code&gt;/certificate sign template-CA ca-crl-host=127.0.0.1 name=&quot;CA&quot;&lt;/code&gt;<br /> <br /> Сертификат сервера<br /> <br /> &lt;code&gt;/certificate add name=template-SRV country=&quot;&quot; state=&quot;&quot; locality=&quot;&quot; organization=&quot;&quot; unit=&quot;&quot; common-name=&quot;srv-OVPN&quot; key-size=4096 days-valid=3650 key-usage=digital-signature,key-encipherment,tls-server&lt;/code&gt;<br /> <br /> &lt;code&gt;/certificate sign template-SRV ca=&quot;CA&quot; name=&quot;srv-OVPN&quot;&lt;/code&gt;<br /> <br /> Шаблон для создания сертификатов клиентов<br /> <br /> &lt;code&gt;/certificate add name=template-CL country=&quot;&quot; state=&quot;&quot; locality=&quot;&quot; organization=&quot;&quot; unit=&quot;&quot; common-name=&quot;client-ovpn-template&quot; key-size=4096 days-valid=3650 key-usage=tls-client&lt;/code&gt;<br /> <br /> === Режим TUN (рабочая протестированная конфигурация!) ===<br /> Открываем порт '''1194/tcp''' (или другой выставленный в настройках ovpn сервера) на INPUT внешнего интерфейса на микротике<br /> <br /> Задаём пул адресов для OVPN-клиентов (можно задать непосредственно в PPP-profile):<br /> <br /> &lt;code&gt;/ip pool add name=OVPN_srv_pool ranges=172.23.100.160/27&lt;/code&gt;<br /> <br /> Создаём PPP-profile для OVPN-сервера<br /> <br /> &lt;code&gt;/ppp profile add name=OVPN_server local-address=172.23.100.1 remote-address=OVPN_srv_pool&lt;/code&gt;<br /> <br /> Настраиваем режим аутентификации пользователей<br /> <br /> &lt;code&gt;/ppp aaa set accounting=yes&lt;/code&gt;<br /> <br /> Добавляем пользователя<br /> <br /> /ppp secret add name=ovpn-user-1 password=P@ssword1 service=ovpn profile=OVPN_server<br /> <br /> Включаем OVPN-сервер<br /> <br /> // НЕ ТРЕБУЕТСЯ использовать сертификаты клиентов (клиент будет подключаться ТОЛЬКО с логином/паролем) - require-client-certificate=no<br /> <br /> &lt;nowiki&gt;#&lt;/nowiki&gt;/interface ovpn-server server set auth=sha1 cipher=blowfish128,aes256 default-profile=OVPN_server mode=ip netmask=24 require-client-certificate=no certificate=srv-OVPN enabled=yes<br /> <br /> /interface ovpn-server server set certificate=srv-OVPN cipher=blowfish128,aes128,aes192,aes256 enabled=yes port=1101 require-client-certificate=no<br /> <br /> // ВАРИАНТ 1:<br /> <br /> // НЕ ИСПОЛЬЗОВАТЬ СЕРТИФИКАТЫ КЛИЕНТОВ<br /> <br /> // ---<br /> <br /> // Экспорт сертификатов для настройки клиентов:<br /> <br /> // Экспорт сертификата CA:<br /> <br /> /certificate export-certificate CA export-passphrase=&quot;&quot;<br /> <br /> // получается файл export_CA.crt на микроте<br /> <br /> // Извлекаем полученный файл сертификата из микротика любым удобным способом.<br /> <br />   // ВАРИАНТ 2:<br /> <br />   // ИСПОЛЬЗОВАНИЕ СЕРТИФИКАТОВ КЛИЕНТОВ<br /> <br />   // ---<br /> <br />   // Экспорт сертификата CA:<br /> <br />   /certificate export-certificate CA export-passphrase=&quot;&quot;<br /> <br />   // Сертификат первого клиента:<br /> <br />   /certificate add name=template-CL-to-issue copy-from=&quot;template-CL&quot; common-name=&quot;client-ovpn-1&quot;<br /> <br />   /certificate sign template-CL-to-issue ca=&quot;CA&quot; name=&quot;client-ovpn-1&quot;<br /> <br />   // В будущем, для отзыва сертификатов используем команду:<br /> <br />   /certificate issued-revoke %cert-name%<br /> <br />   // Экспорт сертификата и ключа клиента:<br /> <br />   /certificate export-certificate client-ovpn-1 export-passphrase=&lt;private-key-password1&gt;<br /> <br />   // будет создано 2 файла: cert_export_client-ovpn-1.crt, cert_export_client-ovpn-1.key<br /> <br />   // копируем их на машину клиента<br /> <br /> КЛИЕНТ OVPN WINDOWS<br /> <br /> &lt;nowiki&gt;-------------------&lt;/nowiki&gt;<br /> <br /> OPENVPN УСТАНОВОЧНЫЙ:<br /> <br /> ---<br /> <br />    // скачиваем OpenVPN 2.4.6<br /> <br />    // с другими версиями может быть проблема с неподписанными драйверами TAP<br /> <br />    &lt;nowiki&gt;https://openvpn.net/community-downloads/&lt;/nowiki&gt;<br /> <br />    // устанавливаем<br /> <br />    // создаем и копируем client.ovpn, auth.txt в C:\Program Files\OpenVPN\config\<br /> <br />    client.ovpn<br /> <br />        ---<br /> <br />        client<br /> <br />        dev tun<br /> <br />        proto tcp<br /> <br />        remote domain123.ru 1101<br /> <br />        resolv-retry infinite<br /> <br />        nobind<br /> <br />        persist-key<br /> <br />        persist-tun<br /> <br />        mute-replay-warnings<br /> <br />        ;comp-lzo<br /> <br />        verb 3<br /> <br />        ;mute 20<br /> <br />        ;route 192.168.111.0 255.255.255.0<br /> <br />        remote-cert-tls server<br /> <br />        auth-user-pass auth.txt<br /> <br />        auth-retry nointeract<br /> <br />        cipher AES-256-CBC<br /> <br />        # default gw over ovpn server<br /> <br />        ;redirect-gateway autolocal<br /> <br />    &lt;ca&gt;<br /> <br />        &lt;СЮДА КОПИРУЕМ СОДЕРЖИМОЕ export_CA.crt, ЭКСПОРТИРОВАННОГО ИЗ MIKROTIK-OVPN-SERVER&gt;<br /> <br />    &lt;/ca&gt;<br /> <br />    ---<br /> <br />    auth.txt<br /> <br />        ---<br /> <br />        user01<br /> <br />        Pa$$Word<br /> <br />        ---<br /> <br />    // в настройках программы добавляем запуск OpenVPN вместе с Windows<br /> <br />    // подключаемся вручную тыкая на иконку в трее<br /> <br />    <br /> <br />    // для автозапуска VPN можно также использовать автозапуск службы OpenVPNService<br /> <br />    // при запуске системы запустится конфиг client.ovpn<br /> <br />    // но при этом теряется смысл GUI иконки в трее<br /> <br /> OPENVPN ПОРТАТИВНЫЙ:<br /> <br /> ---<br /> <br />    // ВАРИАНТ 1:<br /> <br />    // НЕ ИСПОЛЬЗОВАТЬ СЕРТИФИКАТЫ КЛИЕНТОВ<br /> <br />    // ---<br /> <br />    // Используем приложение OpenVPNPortable в комплекте с мануалом<br /> <br />    // в OpenVPNPortable\data\config\client.ovpn изменяем содержимое &lt;ca&gt; ... &lt;/ca&gt; на содержимое файла export_CA.crt<br /> <br />    // в auth.txt записываем лог/пас клиента<br /> <br />        // ВАРИАНТ 2:<br /> <br />        // ИСПОЛЬЗОВАНИЕ СЕРТИФИКАТОВ КЛИЕНТОВ<br /> <br />        // в OpenVPNPortable\data\config\client.ovpn:<br /> <br />        //  - изменяем содержимое &lt;ca&gt; ... &lt;/ca&gt; на содержимое файла export_CA.crt<br /> <br />        //  - изменяем содержимое &lt;cert&gt; ... &lt;/cert&gt; на содержимое файла cert_export_client-ovpn-1.crt<br /> <br />        //  - изменяем содержимое &lt;key&gt; ... &lt;/key&gt; на содержимое файла cert_export_client-ovpn-1.key<br /> <br />        //  - в auth.txt записываем лог/пас клиента<br /> <br />        //  - при подключении необходимо будет ввести пароль, который задали при экспорте сертификата и ключа на микротике<br /> <br />    ПРИМЕЧАНИЕ:<br /> <br />    - для первого запуска клиента необходимо запустить программу от имени Администратора (это необходимо для установки драйвера интерфейса туннеля)<br /> <br />    - для применения параметров маршрутизации, прописанных в конфиге (в том числе и дефолтного шлюза через openvpn сервер), сам сервис OVPN, или же OVPN GUI должны быть запущены от имени Администратора<br /> <br />    - если пользователь входит в группу Администраторы, то при запуске от имени Администратора пароль Администратора не требуется<br /> <br />    - если пользователь НЕ входит в группу Администраторы, то при запуске от имени Администратора требуется пароль Администратора<br /> <br />    <br /> <br /> КЛИЕНТ OVPN LINUX (CENTOS 7)<br /> <br /> &lt;nowiki&gt;-------------------&lt;/nowiki&gt;    <br /> <br /> yum install openvpn<br /> <br /> nano /etc/openvpn/client/lip-ati-10-254.auth<br /> <br /> ---<br /> <br /> user01<br /> <br /> PassW0rd<br /> <br /> ---<br /> <br /> nano /etc/openvpn/client/lip-ati-10-254.conf<br /> <br /> ---<br /> <br /> client<br /> <br /> dev tun<br /> <br /> proto tcp<br /> <br /> remote 793108e281c9.sn.mynetname.net 1101<br /> <br /> resolv-retry infinite<br /> <br /> nobind<br /> <br /> persist-key<br /> <br /> persist-tun<br /> <br /> mute-replay-warnings<br /> <br /> &lt;nowiki&gt;;&lt;/nowiki&gt;comp-lzo<br /> <br /> verb 3<br /> <br /> &lt;nowiki&gt;;&lt;/nowiki&gt;mute 20<br /> <br /> &lt;nowiki&gt;;&lt;/nowiki&gt;route 192.168.10.0 255.255.255.0<br /> <br /> remote-cert-tls server<br /> <br /> auth-nocache<br /> <br /> auth-user-pass /etc/openvpn/client/lip-ati-10-254.auth<br /> <br /> auth-retry nointeract<br /> <br /> cipher AES-256-CBC<br /> <br /> &lt;nowiki&gt;#&lt;/nowiki&gt; default gw over ovpn server<br /> <br /> &lt;nowiki&gt;#&lt;/nowiki&gt;redirect-gateway autolocal<br /> <br /> &lt;ca&gt;<br /> <br />    &lt;СЮДА КОПИРУЕМ СОДЕРЖИМОЕ export_CA.crt, ЭКСПОРТИРОВАННОГО ИЗ MIKROTIK-OVPN-SERVER&gt;<br /> <br /> &lt;/ca&gt;<br /> <br /> ---<br /> <br /> systemctl enable openvpn-client@lip-ati-10-254<br /> <br /> systemctl start openvpn-client@lip-ati-10-254<br /> <br /> КЛИЕНТ OVPN ANDROID<br /> <br /> &lt;nowiki&gt;-------------------&lt;/nowiki&gt;<br /> <br /> - через Play Market устанавливаем &quot;OpenVPN Connect&quot;<br /> <br /> - создаем и копируем client.ovpn на Android<br /> <br /> client.ovpn<br /> <br />    ---<br /> <br />    client<br /> <br />    dev tun<br /> <br />    proto tcp<br /> <br />    remote domain123.ru 1101<br /> <br />    resolv-retry infinite<br /> <br />    nobind<br /> <br />    persist-key<br /> <br />    persist-tun<br /> <br />    mute-replay-warnings<br /> <br />    ;comp-lzo<br /> <br />    verb 3<br /> <br />    ;mute 20<br /> <br />    ;route 192.168.111.0 255.255.255.0<br /> <br />    remote-cert-tls server<br /> <br />    auth-user-pass<br /> <br />    auth-retry nointeract<br /> <br />    cipher AES-256-CBC<br /> <br />    # default gw over ovpn server<br /> <br />    ;redirect-gateway autolocal<br /> <br /> &lt;ca&gt;<br /> <br />    &lt;СЮДА КОПИРУЕМ СОДЕРЖИМОЕ export_CA.crt, ЭКСПОРТИРОВАННОГО ИЗ MIKROTIK-OVPN-SERVER&gt;<br /> <br /> &lt;/ca&gt;<br /> <br /> ---<br /> <br /> - открываем &quot;OpenVPN Connect&quot;<br /> <br /> - импортируем файл client.ovpn<br /> <br /> - вводим лог/пас пользователя<br /> <br /> - подключаемся</div>

Cless