MikroTik Docs
AstrixOrgMikroTik Wiki
  • Welcome
  • Basics
    • Connecting to MT
    • Checking for updates
    • Default configuration
  • IP / Interfaces
    • Interfaces
      • Bridge
      • WIFI
      • LTE
      • VLAN
      • PPPoE
    • Firewall
      • NAT
      • Mangle
      • Layer-7
  • WiFi
    • CAP Mode
  • VPNs
    • OpenVPN
      • Certificates
      • Profiles
      • Servers
      • Secrets
      • Export client profile
  • WireGuard
  • ZeroTier
  • SSTP
  • L2TP/IPsec
  • PPTP
  • Routing
    • Static
    • Dynamic
      • OSPF
      • BGP
      • RIP
    • Multicast
      • IGMP Proxy
      • PIM
    • PBR
    • VRF
    • ECMP
    • MPLS
  • Scripting
    • Syntax
    • User input
  • advanced
    • Failover
      • Dual-WAN
      • WAN and LTE
    • Load balance
    • Export OVPN file
Powered by GitBook
On this page
  • Creating IP pool for clients
  • Creating custom profile
  1. VPNs
  2. OpenVPN

Profiles

A profile controls IP address assignment, timeouts, DNS, encryption, and other parameters applied to each session.

It is recommended to create your own profile instead of using defaults.

In WinBox you can create VPN profile in PPP -> Profiles, click on + and create your profile or via Terminal in /ppp profile, for this configuration

There will several default profiles:

  1. default - Basic profile with minimal config

  2. default-encryption - Enables encryption


Creating IP pool for clients

You need to create IP pool or range from which will be IP addresses assigned to users.

Let's say we have second network for VPN users (e.g. 10.10.10.0/24), where 10.10.10.1 is the gateway, so we need to create IP pool in range from 10.10.10.2 to 10.10.10.254

/ip pool add name="vpn-pool" ranges=10.10.10.2-10.10.10.254

Creating custom profile

Click on + to add new profile, and you will need define:

  • Name - Your profile name, (e.g. vpn-users)

  • Local Address - Router IP, end of tunnel (e.g. 10.10.10.1)

  • Remote Address - IP pool or range for clients, (e.g. )

  • DNS Servers - (Optional) Which DNSs should clients use, (e.g. 1.1.1.1, 8.8.8.8)

/ppp profile add name="vpn-users" local-address="10.10.10.1" remote-address=vpn-pool dns-servers=10.10.10.1,1.1.1.1,8.8.8.8
PreviousCertificatesNextServers

Last updated 2 months ago