Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save carlesloriente/94a203608009ee1bb3c6c335317e11a6 to your computer and use it in GitHub Desktop.
Save carlesloriente/94a203608009ee1bb3c6c335317e11a6 to your computer and use it in GitHub Desktop.
# Certificate creation for users
/certificate add [email protected] [email protected] [email protected] subject-alt-name=email:[email protected]
/certificate sign [email protected] ca=CA.yourdomain.com
/certificate export-certificate [email protected] type=pkcs12 export-passphrase=YOURPASSPHRASE
/ip ipsec identity add auth-method=digital-signature certificate=vpn.yourdomain.com [email protected] generate-policy=port-strict match-by=certificate mode-config="modeconf vpn.yourdomain.com" peer="peer 1.1.1.1" policy-template-group="group vpn.yourdomain.com" remote-id=user-fqdn:[email protected]
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment