Certificate-based VPN for MikroTik

Manage a MikroTik remotely with OpenVPN

OpenVPN fits environments that already use certificates and cross-platform clients. Exact capabilities depend on the RouterOS release, so confirm the supported ciphers and transports before deployment.

Create my SunVPN access View documentation

RouterOS compatibility

OpenVPN support evolved between RouterOS 6 and 7. Record the exact version of every router before generating a shared configuration.

Certificate management

A separate certificate for every device makes revocation easier. Keep the private key on the router and renew certificates before they expire.

What you get

Certificate authentication

Clients on multiple operating systems

Precise routed-network control

Integration with an existing PKI

How it works

  1. 1

    Select settings supported by your RouterOS release.

  2. 2

    Import the required authority and certificate.

  3. 3

    Configure the client and lock down administration services.

Related guides

Configure remote MikroTik access with L2TP Choose SSTP for a remote MikroTik connection Use WireGuard to access a MikroTik remotely Connect MikroTik routers with ZeroTier

Frequently asked questions

Does OpenVPN use TCP or UDP?

That depends on the RouterOS release and selected configuration.

Is one certificate per router recommended?

Yes, because one device can then be revoked without affecting the fleet.

Can Webfig run through OpenVPN?

Yes, if Webfig listens on the right interface and the firewall permits tunnel traffic.

Ready to manage your MikroTik remotely?

Create your SunVPN account and configure your first connection in a few steps.

Démarrer maintenant