Community discussions

MikroTik App
 
User avatar
stratonetworks
just joined
Topic Author
Posts: 24
Joined: Wed Apr 24, 2013 12:57 pm

What Interface maps OVPN server interface ?

Fri Jul 29, 2016 2:30 pm

Hi comrades!
I have a OVPN server interface. a Simple question that I don't find answer for it: the OVPN server  interface, which interface maps to ?  For clear out: mi RB2011 router have ten phisicals interfaces. how can decide the interface/interfaces from OVPN clients are conecting (firewall rules apart) ?

I understand that BRIDGE profile property, is a optional bridge which clients are mapped.

Thanks in advance
 
User avatar
Paternot
Forum Veteran
Forum Veteran
Posts: 953
Joined: Thu Jun 02, 2016 4:01 am
Location: Niterói / Brazil

Re: What Interface maps OVPN server interface ?

Fri Jul 29, 2016 9:00 pm

I have a OVPN server interface. a Simple question that I don't find answer for it: the OVPN server  interface, which interface maps to ?  For clear out: mi RB2011 router have ten phisicals interfaces. how can decide the interface/interfaces from OVPN clients are conecting (firewall rules apart) ?
As far as I know, You don't. The OVPN interface is an abstraction, not an interface per se. I have an OVPN server, with 3WANs. With the port open on the firewall You can connect to any WAN interface.
 
User avatar
stratonetworks
just joined
Topic Author
Posts: 24
Joined: Wed Apr 24, 2013 12:57 pm

Re: What Interface maps OVPN server interface ?

Sun Jul 31, 2016 12:12 pm

Thanks for the Reply! So it seems to work, beacuse ay this moment my OVPN virtual interface is listening on all of ports.


some suggestions for anyone more ?
 
sls
just joined
Posts: 9
Joined: Mon Feb 15, 2016 11:21 pm

Re: What Interface maps OVPN server interface ?

Sun Jul 31, 2016 12:49 pm

Hi,
You could define more specific rules for your VPN interface (as far as that's what your last question is about) i.e.:
;;; Allow OPVN traffic through WAN1 
      
    chain=forward action=accept protocol=tcp in-interface=OVPN out-interface=WAN1 log=no log-prefix=""
Now, aforementioned rule will just allow your VPN interface to use WAN1, nothing else. 

Best regards,

sls

Who is online

Users browsing this forum: rplant and 46 guests