openvpn ovpn server mikrotik

/certificate
add name=ca-cert common-name=ca-cert days-valid=3650 key-size=2048 key-usage=crl-sign,key-cert-sign
add name=server-cert common-name=server-cert days-valid=3650 key-size=2048 key-usage=digital-signature,key-encipherment,tls-server
add name=client-cert common-name=client-cert days-valid=3650 key-size=2048 key-usage=tls-client


/certificate
sign ca-cert ca-crl-host=GIVE.IP.WAN.HERE
sign server-cert ca=ca-cert
sign client-cert ca=ca-cert
set server-cert trusted=yes

/certificate
export-certificate ca-cert

/ppp profile
add local-address=10.10.21.254 name=endpoint only-one=yes rate-limit="5M 0 0 0 8 1M"
add local-address=10.10.21.254 name=kied only-one=yes rate-limit="100M 0 0 0 8 100M"
add local-address=10.31.136.3 name=Router_Distribusi only-one=yes
/ppp secret
add name=


/interface ovpn-server server
set certificate=server-cert cipher=aes256-cbc,aes128-gcm,aes192-gcm,aes256-gcm default-profile=endpoint enabled=yes protocol=udp