OpenVPN implementation ROS 6.49
Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve
Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Thanks Andrew, So, up to V7 or stay with weaker VPNs. Have been avoiding V7 because of the script changes needed. 6.13 to 6.49 was bad enough :-) -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 11:45 To: MikroTik Australia Public List Cc: Steve at Digitronics Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Hi, v7 also has wireguard though..... then you don't need OpenVPN. IMHO that alone is worth the pain of fixing scripts. I have not found too much that was incompatible, but I guess it depends how complex your scripts are. Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:13 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks Andrew, So, up to V7 or stay with weaker VPNs. Have been avoiding V7 because of the script changes needed. 6.13 to 6.49 was bad enough :-) -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 11:45 To: MikroTik Australia Public List Cc: Steve at Digitronics Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Thanks. Does the V7 wireguard implementation create an interface I can route thru? I have been unable to use IKEv2 and native IPSEC because they don't. -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 14:15 To: steve@digitronics.com.au; 'MikroTik Australia Public List' Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, v7 also has wireguard though..... then you don't need OpenVPN. IMHO that alone is worth the pain of fixing scripts. I have not found too much that was incompatible, but I guess it depends how complex your scripts are. Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:13 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks Andrew, So, up to V7 or stay with weaker VPNs. Have been avoiding V7 because of the script changes needed. 6.13 to 6.49 was bad enough :-) -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 11:45 To: MikroTik Australia Public List Cc: Steve at Digitronics Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Hi,
Does the V7 wireguard implementation create an interface I can route thru Yes. And supports OSPF
Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:48 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks. Does the V7 wireguard implementation create an interface I can route thru? I have been unable to use IKEv2 and native IPSEC because they don't. -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 14:15 To: steve@digitronics.com.au; 'MikroTik Australia Public List' Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, v7 also has wireguard though..... then you don't need OpenVPN. IMHO that alone is worth the pain of fixing scripts. I have not found too much that was incompatible, but I guess it depends how complex your scripts are. Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:13 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks Andrew, So, up to V7 or stay with weaker VPNs. Have been avoiding V7 because of the script changes needed. 6.13 to 6.49 was bad enough :-) -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 11:45 To: MikroTik Australia Public List Cc: Steve at Digitronics Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com.au
Hi, The following thread for use with OSPF over wireguard might be useful. https://forum.mikrotik.com/viewtopic.php?t=182046 ============================================== Hi,
Does the V7 wireguard implementation create an interface I can route thru Yes. And supports OSPF
Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:48 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks. Does the V7 wireguard implementation create an interface I can route thru? I have been unable to use IKEv2 and native IPSEC because they don't. -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 14:15 To: steve@digitronics.com.au; 'MikroTik Australia Public List' Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, v7 also has wireguard though..... then you don't need OpenVPN. IMHO that alone is worth the pain of fixing scripts. I have not found too much that was incompatible, but I guess it depends how complex your scripts are. Andrew -----Original Message----- From: Steve at Digitronics <steve@digitronics.com.au> Sent: Friday, March 1, 2024 11:13 AM To: 'MikroTik Australia Public List' <public@talk.mikrotik.com.au> Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Thanks Andrew, So, up to V7 or stay with weaker VPNs. Have been avoiding V7 because of the script changes needed. 6.13 to 6.49 was bad enough :-) -Steve -----Original Message----- From: Andrew Oakeley [mailto:andrew@oakeley.com.au] Sent: Friday, 1 March 2024 11:45 To: MikroTik Australia Public List Cc: Steve at Digitronics Subject: RE: [MT-AU Public] OpenVPN implementation ROS 6.49 Hi, 6.49 generally no. - requires user/pass in client config (can't do certificate only authentication) - TCP only (can't do UDP) Latest v7 has a lot of OVPN improvements and is generally quite compatible. Andrew -----Original Message----- From: Public <public-bounces@talk.mikrotik.com.au> On Behalf Of Steve at Digitronics via Public Sent: Friday, March 1, 2024 8:08 AM To: Public@talk.mikrotik.com.au Cc: Steve at Digitronics <steve@digitronics.com.au> Subject: [MT-AU Public] OpenVPN implementation ROS 6.49 Can anyone confirm for me that the OpenVPN implementation in 6.49 works with VPN providers' OpenVPN servers generally? There is chat that the OpenVPN implementation in ROS is not 'open' and I would rather be sure before I spend more time trying to get it to work with VPN service providers. -Steve _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au _______________________________________________ Public mailing list Public@talk.mikrotik.com.au http://talk.mikrotik.com.au/mailman/listinfo/public_talk.mikrotik.com. au---------------------------- Roger Plant
participants (3)
-
Andrew Oakeley -
Roger Plant -
Steve at Digitronics