Windows computers use ONPN to connect to headquarters-RouterOS Intermediate

Overview:

The main purpose of this chapter is for external office staff to use ONPN for telecommuting, so as to facilitate employees to deal with the internal business of the company.

Topology and description

Our mobile equipment (PC) uses the Unicom network to simulate the external network, and connects to the router of the headquarters through the ONPN connection to realize the office of the internal network.

Configuration requirements:

1.ONPN client

two。 Certificate of headquarters ROS (CA and client certificate)

Note: since the KEY of our Client certificate has been encrypted, we will need to enter the password twice (once for key and once for user name) when dialing, and in this case we will use OpenSSL to decrypt key. So all we have to do is enter the user name and password.

Configuration

1. There is nothing to say about installing the ONPN client. The next step along the way is to pop up and install the network card driver.

two。 Decrypt KEY's certificate first.

Put the Key file in the root directory of disk C

Open CMD (run with administrator)

Cd to the appropriate directory

Enter the command as follows

The command is as follows: openssl rsa-in C:\ Client.key-out C:\ ClientNew.key

Then enter the password.

3. Place the certificate in the following path and create a new configuration file

The configuration content is as follows (Chinese is only for explanation, and the configuration file does not need to be entered in Chinese)

4. Connect

Before connecting, be sure to confirm one thing, that is, your computer time must be accurate, otherwise there will be an error.

Double-click the ONPN GUI icon on the desktop, and a locked network icon appears in the lower right corner.

Right-click this icon and select Connect

A user name and password prompt appears at this time, and you can enter it yourself.

Hint of successful connection

At this point, you can see whether the routing table has been injected through route print:

In the network card, you can see that the DNS of the headquarters has been written.

Test the page of the headquarters that opens:

End of this chapter!