Hello.
I updated router OS from version 5.0 to latest 6.13. After this, I can’t access another LANs and router/gateway, but I can access computer on same network.
I’m not network expert, so it is possible I have something wrong configured, but before update was functional.
Example:
Router LAN1: 192.168.1.1
OVPN client address: 192.168.1.19
PC on LAN1: 192.168.1.70
PC on LAN2: 192.168.2.70
Before update, I was able access 192.168.1.7 and 192.168.2.70
After update, I’m not able access 192.168.2.70 but I still can access 192.168.1.70
Also I can’t access 192.168.1.1, but I not know if I was able access it before update,
probably I was able access route also before update.
Can anybody idea what I can try correct?
Thank you.
There were alot of changes, bugs, and fixes between those versions. If you want to use 6.13, you are going to have to re-validate the entire scenario from scratch.
Thank you for reply. Maybe it was not caused by update, I’m not sure.
I tried create another OVPN lan, but still not able access router.
I tried log on firewall and I see ping between two computers over VPN is as FORWARD,
and ping between VPN computer and router is as INPUT/OUTPUT, can it be cause?
ping
192.168.1.19 → 192.168.1.7 OK
192.168.1.7 → 192.168.1.19 OK
192.168.1.19 → 192.168.1.1 failed
192.168.1.1 → 192.168.1.19 failed
When ping from 192.168.1.70 to 192.168.1.19,
I see in firewall logs:
forward in:bridge(LAN1) out:bridge(VPN), 60 bytes
forward in:bridge(VPN) out:bridge(LAN1), 60 bytes
and ping is DONE
When ping from 192.168.1.19 to 192.168.1.7,
same as previous, but conversely
and ping is DONE
When ping from 192.168.1.19 to 192.168.1.1,
I see in firewall logs:
input in:bridge(VPN) out:(none), 60 bytes 192.168.1.19->192.168.1.1
output in:(none) out:VPN (not in bridge), 60 bytes 192.168.1.1->192.168.1.19
and ping is FALSE
When ping from 192.168.1.1 (mikrotik terminal) to 192.168.1.19,
input missing
output in:(none) out:VPN (not in bridge), 60 bytes 192.168.1.10->192.168.1.19
and ping is FALSE
(192.168.1.10 is local address on OVPN profile)