Bart, Thanks for the response. I'll give it proper attention later tonight. Rob K7QJ On Wednesday, May 6, 2020, 04:48:53 PM PDT, Bart Kus <me@bartk.us> wrote: It looks like connect-to can take either a name or an address: [eo@CR1] /interface ovpn-client> add connect-to= ConnectTo ::= Address | Name Name -- string value Address ::= A.B.C.D (IP address) Have you tried having your dynamic IP register with DNS, and then have the ovpn-client connect to that DNS? On the ovpn-server side, there's instructions from our Open Peering Policy page on how to configure Dynamic DNS: http://hamwan.org/Labs/Open%20Peering%20Policy.html#optionally-configure-dyn... Although Mikrotik also has their own "ip cloud" dynamic dns thing: https://wiki.mikrotik.com/wiki/Manual:IP/Cloud --Bart On 5/6/2020 2:36 AM, Rob Martin via PSDR wrote:
Hello,
I would appreciate some assistance in writing a script to run in a Mikrotik router.
I am trying to get a remote Mikrotik router to phone home by establishing an ovpn tunnel. I am able to deliver my local IP address to the remote router, and store it in its firewall address list. My local IP changes occasionally.
The ovpn tunnel setup does not seem to have a way to directly use a variable for the connect-to address. I need help with a script to perform this.
Here are details of the project:
1. Add an entry to the list to simulate a separate process that adds entries automatically. I have the this part working already.
/ip firewall address-list add list=K7QJ address=97.11.22.33
2. Add the following ovpn tunnel to simulate an earlier entry in the router setting up the tunnel. This is a slightly edited version of a working tunnel.
/interface ovpn-client add add-default-route=yes certificate=cert_export_client_QJ.crt_0 cipher=aes256 comment="Tunnel to K7QJ TS " connect-to=12.34.56.78 **** placeholder IP disabled=yes mac-address=00:11:22:33:44:55 name=Tnl_K7QJ password=abcdefg user=K7QJ_A
3. Here is where I need help..... Create a script that will scan the address list, locate the entry K7QJ, and put the address value (97.11.22.33) in a variable.
4. Add lines to the script that will edit the above tunnel setup as follows:
connect-to=97.11.22.33 **** where the IP is recovered from the variable disabled=no **** and the tunnel goes live.
Thanks for any help you might be able to offer.
Rob K7QJ _______________________________________________ PSDR mailing list PSDR@hamwan.org http://mail.hamwan.net/mailman/listinfo/psdr