Skip to content

Instantly share code, notes, and snippets.

@carlesloriente

carlesloriente/mikrotik-routeros_create-ipsec-ikev2-certificates_vpn_users.rsc

Last active February 8, 2024 01:12
Show Gist options
  • Save carlesloriente/94a203608009ee1bb3c6c335317e11a6 to your computer and use it in GitHub Desktop.
Save carlesloriente/94a203608009ee1bb3c6c335317e11a6 to your computer and use it in GitHub Desktop.
Download ZIP
Raw
mikrotik-routeros_create-ipsec-ikev2-certificates_vpn_users.rsc
# Certificate creation for users
/certificate add copy-from=~clienttemplate@vpn.yourdomain.com name=USERNAME@vpn.yourdomain.com common-name=USERNAME@vpn.yourdomain.com subject-alt-name=email:USERNAME@vpn.yourdomain.com
/certificate sign USERNAME@vpn.yourdomain.com ca=CA.yourdomain.com
/certificate export-certificate USERNAME@vpn.yourdomain.com type=pkcs12 export-passphrase=YOURPASSPHRASE
/ip ipsec identity add auth-method=digital-signature certificate=vpn.yourdomain.com remote-certificate=USERNAME@vpn.yourdomain.com generate-policy=port-strict match-by=certificate mode-config="modeconf vpn.yourdomain.com" peer="peer 1.1.1.1" policy-template-group="group vpn.yourdomain.com" remote-id=user-fqdn:USERNAME@vpn.yourdomain.com
@carlesloriente
Copy link
Author

Full article https://www.notesoncloudcomputing.com/routeros/mikrotik/vpn/2021/04/23/configure-vpn-server-ikev2-ipsec-with-certificates-mikrotik-routeros/

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment