Changes between Initial Version and Version 1 of Mikrotikvpn

Timestamp:

02/28/21 10:05:09 (4 years ago)

Author:

krit

Comment:

--

Mikrotikvpn

@@ +1 @@
+= Mikrotik VPN =
+
+We want Mikrotik to make l2tp connect to server when it check the webserver. [[br]]
+1. Web server site
+2. VPN server
+3. l2tp Mikrotik client
+
+On Web server, we need to edit file '''out.txt''' for any vpn client to check the connect need or not.
+
+{{{
+#!sh
+/home/krit/public_html/Tmp/D4410D3300C8
+[krit@mini D4410D3300C8]$ cat out2.txt 
+trueiot.io, tonic11, vpnPassw0rd, 1,
+[krit@mini D4410D3300C8]$ 
+}}}
+In above, vpn server=trueiot.io, vpn username=tonic11, passwd=vpnPassw0rd, connect enable=1 (to disable connection this value will be 0) [[br]]
+
+
+
+VPN with l2tp config script
+{{{
+#!sh
+ 5   name="http_get_5" owner="admin" policy=ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon 
+     dont-require-permissions=no last-started=feb/27/2021 00:36:10 run-count=10 source=
+       {
+             :local serialnum [/system routerboard get serial-number];
+             :put $serialnum;
+             :local result [/tool fetch url="http://192.168.5.1/~krit/Tmp/$serialnum/out2.txt" as-value output=user];
+             :put $result;
+             :local msg ($result->"data");
+             :put "---msg---";
+             :put $msg;
+             :put "---msg 3 --";
+             :local myArray [:toarray [:pick $msg ([:find $msg ":"]) [:len $msg]]];
+             :local ipaddr [:pick $myArray 0];
+             :local uname [:pick $myArray 1];
+             :local passwd [:pick $myArray 2];
+             :local conn [:pick $myArray 3];
+             :put "ip: $ipaddr";
+             :put "user: $uname";
+             :put "passwd: $passwd";
+             :put "connect: $conn"; 
+             :put "------------";
+             :local serialnum [/system routerboard get serial-number];
+             :put $serialnum;
+             :if ($result->"status" = "finished") do={                                            
+                :if ( $conn = "0" ) do={
+                    :log info "value is $conn disable l2tp-out1 for user $uname";      
+                    :put "value is $conn disable l2tp-out1 for user $uname";
+                    /interface l2tp-client disable l2tp-out1; 
+                } else={             
+                    :put "edit user: $uname in l2tp";
+                    :log info "edit user: $uname in l2tp";
+                    /interface l2tp-client set connect-to=$ipaddr l2tp-out1;
+                    /interface l2tp-client set user=$uname l2tp-out1; 
+                    /interface l2tp-client set password=$passwd l2tp-out1;
+                    /interface l2tp-client enable l2tp-out1;
+                 }
+              }                        
+       } 
+
+[admin@MikroTik] > 
+}}}