Konfigurasi Open VPN Server Mikrotik Dengan Mikrotik

Tujuan : agar client terhubung secara lokal pada jaringan 192.168.80.0/24

1. Informasi Sistem

Router: MikroTik RouterOS
VPN Protocol: OpenVPN
LAN Server: 192.168.80.0/24
Gateway LAN: 192.168.80.1
Subnet VPN: 10.10.10.0/24
Port OVPN: 1194 (TCP)

2. Pembuatan Sertifikat di MikroTik

2.1 Buat CA (Certificate Authority)

Buka terminal mikrotik:
/certificate
add name=ca-template common-name=MyCA key-usage=key-cert-sign,crl-sign
sign ca-template name=MyCA

Cek status Pastikan CA statusnya: trusted=yes
/certificate print

Jika belum:
/certificate set MyCA trusted=yes

2.2 Buat Sertifikat Server

/certificate
add name=server-template common-name=ovpn-server
sign server-template ca=MyCA name=ovpn-server

/certificate set ovpn-server trusted=yes

2.3 Buat Sertifikat Client

/certificate
add name=client1-template common-name=client1
sign client1-template ca=MyCA name=client1

2.4 Export Sertifikat ke Client

/certificate export-certificate client1 export-passphrase=1234
/certificate export-certificate MyCA

File yang akan muncul di Files:

client1.crt
client1.key
MyCA.crt

Download file tersebut ke PC client.

3. Konfigurasi OVPN Server

3.1 Buat IP Pool

/ip pool
add name=ovpn-pool ranges=10.10.10.10-10.10.10.50

3.2 Buat PPP Profile

/ppp profile
add name=ovpn-profile \
local-address=10.10.10.1 \
remote-address=ovpn-pool \
dns-server=8.8.8.8

3.3 Buat User VPN

/ppp secret
add name=user1 \
password=123456 \
service=ovpn \
profile=ovpn-profile

3.4 Aktifkan OVPN Server

/interface ovpn-server server
set enabled=yes \
port=1194 \
mode=ip \
netmask=24 \
authentication=sha1 \
cipher=aes256 \
certificate=ovpn-server \
require-client-certificate=yes

4. Firewall

4.1 Allow Port OVPN

/ip firewall filter
add chain=input protocol=tcp port=1194 action=accept comment="Allow OVPN"

4.2 NAT Internet

/ip firewall nat
add chain=srcnat out-interface=ether3-WAN action=masquerade

5. Konfigurasi Client Windows

5.1 Install OpenVPN Client

Download pada https://openvpn.net/community/ atau untuk mencari repository lama pada https://build.openvpn.net/downloads/releases/?C=M&O=D

lalu Install OpenVPN GUI.

5.2 Copy File Sertifikat

File:

MyCA.crt
client1.crt
client1.key

untuk dibuat client1.ovpn :

client
dev tun
proto tcp-client
remote 36.67.22.18 1194
route 192.168.80.0 255.255.255.0
resolv-retry infinite
nobind
persist-key
persist-tun

auth SHA1
cipher AES-256-CBC
data-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC
data-ciphers-fallback AES-256-CBC

remote-cert-tls server
auth-user-pass
auth-nocache

<ca>
sertifikat dalam MyCA.crt
</ca>

<cert>
sertifikat dalam client1.crt
</cert>

<key>
sertifikat dalam client1.key
</key>

5.3 Import File Sertifikat client1.ovpn pada OpenVPN GUI

6. Connect VPN

Jalankan OpenVPN GUI
Klik kanan → Connect
Masukkan username & password secret PPP

7. Verifikasi

Uji koneksi ke 192.168.80.1