boren wrote:
如果tcp port80沒有開放的話是否就無法使用這個方案了？
因為要避免從internet連入routerboard，通常都不會開啟tcp port80對吧？
我試過沒開tcp port80，就無法使用這個方案。...(恕刪)
這應該是無關的, 畢竟 web-proxy port 有開放就應該沒有問題了.
但是照步驟做下來，只有產生 private key
server.key & server.crt 是在哪裡 copy 呢？
pctine wrote:
直接 email 詢...(恕刪)
原廠回答
不過或許以後會有機會, 我只想做個帳密的認證而已, 不需要將 cache 儲存在裡面...
Gemma wrote:
但是照步驟做下來，只有產生 private key
server.key & server.crt 是在哪裡 copy 呢？...(恕刪)
那篇文章有詳細說明了, 所以你完成了 "Validations Wizard(domain確認)" & "Certificates Wizard(SSL憑證生成)" 兩個步驟了嗎?
FB: Pctine
認證完 Domain Name 以後，要加上 hostname.domainname，然後等一段小小時間
Please login to your account and select from the Tool Box tab the section Retrieve Certificate. The pending certificate is marked with a green colored label.
這邊就可以看到 server.crt
好像也可以產生不同 sub domain 的 private key
不過，說是要審核至少三小時
結果把 server.crt 與 private.key 匯入 RouterOS，兩個匹配不起來
要設定 SSTP 都是出現 can't load private key
pctine wrote:
那篇文章有詳細說明了...(恕刪)
本來是長這樣
-----BEGIN RSA PRIVATE KEY-----
Proc-Type: 4,ENCRYPTED
DEK-Info: AES-256-CBC,CB1067CFE3750F6AE5F0ABACC20B5294
qzVGmv2aRmsbge3yh1pliPopMtatrWYzZTkYhWo0noGo9olW+sLQj4e25BhIjniG
.
.
做了以後是長這樣
-----BEGIN RSA PRIVATE KEY-----
MIIEpAIBAAKCAQEA62jMkf1oS0H4VwbmAOc4HeYsxUkMFjObqxNseRDAUTqkLqNX
VHn3LVFcI1Orb8zcX5byXo9Rf0qbiyh5ITpkSgjOC15TWCHA2TUGrpN1unIyQj/G
.
.
而 .crt 是長這樣
-----BEGIN CERTIFICATE-----
MIIGbDCCBVSgAwIBAgIDCm3dMA0GCSqGSIb3DQEBBQUAMIGMMQswCQYDVQQGEwJJ
.
.
然後我把 crt 跟 decrypt 的 private key 匯入 RouterOS 裡面，但兩個好像配不起來
不像之前我設定 OVPN 那樣，在 Certificate 前面會出現 KR 的字眼
pctine wrote:
private ke...(恕刪)
What's new in 6.0 (2013-May-17 14:04):
*) ipsec - added /peer passive option which will prevent starting ISAKMP negotiation
and signifies xauth responder/initiator side;
*) RouterBOARD - default wireless config now includes password - serial number;
*) lte - support YOTA WLTUBA-107;
*) console - fixed crash when variable name was not specified for
*) hotspot - added mac-cookie login method;
http://wiki.mikrotik.com/wiki/Manual:Hotspot_Introduction#MAC_Cookie
*) lcd - show a message when system shutdown is complete;
*) lcd - added Log screen which is accessible through the Main Menu
and shows log messages where action=echo;
*) ipsec - added pre-shared-key-xauth and rsa-signature-hybrid authentication methods;
*) increased max l2mtu on CCR to 10226 bytes;
*) fixed crash on RB1200;
*) fixed bonding - did not work after remove, undo;
*) fixed queues - router could become unresponsive when configuring queues;
*************************************************************************
isec 加入了 pre-shared-key-xauth, 不曉得這樣是否能夠支援 iOS ipsec VPN? 日後再來測看看.
FB: Pctine
內文搜尋
從 APP 打開
X