MikroTik (RouterOS 7)

RouterOS 7 supports OpenVPN over UDP. You import the certificates and create an OVPN client interface — here with copy-paste terminal commands.

1. Get your OpenVPN certificates

   On realvpn.io/settings choose OpenVPN UDP, a location and New manual device, then press Generate config. RealVPN.ovpn is saved to your Downloads.

   Then press Certificates (.zip) and unzip it — you’ll need ca.crt, client.crt, client.key and the server name in server.txt.

   

2. Upload the certificates

   In WinBox open Files and drag in ca.crt, client.crt and client.key.

3. Import them

   Open New Terminal and run:

   RouterOS terminal

   [admin@MikroTik] > /certificate import file-name=ca.crt passphrase="" [admin@MikroTik] > /certificate import file-name=client.crt passphrase="" [admin@MikroTik] > /certificate import file-name=client.key passphrase="" [admin@MikroTik] > /certificate print # client.crt_0 should show flags K T

4. Create the OVPN client

   Replace de-fra.realvpn.space with the server from server.txt:

   RouterOS terminal

   > /interface ovpn-client add name=realvpn connect-to=de-fra.realvpn.space port=1194 \ protocol=udp mode=ip user=realvpn certificate=client.crt_0 \ cipher=aes256-gcm auth=null verify-server-certificate=yes \ add-default-route=yes > /interface ovpn-client monitor realvpn # status: connected

5. Allow LAN traffic out through the tunnel

   RouterOS terminal

   > /ip firewall nat add chain=srcnat out-interface=realvpn action=masquerade comment="RealVPN"

   With add-default-route=yes all traffic uses RealVPN. To route only certain devices, set it to no and use a routing table with /routing rule or mangle rules.