I have create a openvpn server on a rb1100.
/ppp secret> print detail
8 name="rb1200_stofli" service=ovpn caller-id="" password="******" profile=default
local-address=10.122.251.17 remote-address=10.122.251.18 routes="10.121.64.0/18" limit-bytes-in=0
limit-bytes-out=0
I have create a openvpn client on a rb1200
/interface ovpn-client> print
0 R name="rb1200_stofli" mac-address=02:E4:38:5C:EF:99 max-mtu=1500
connect-to=aaa.bbb.ccc.ddd port=443 mode=ip user="rb1200_stofli"
password="******" profile=default certificate=none auth=sha1
cipher=aes256 add-default-route=no
/ip address> print
0 ;;; default configuration
192.168.88.1/24 192.168.88.0 ether10
1 D 192.168.40.74/24 192.168.40.0 ether1-gateway
2 10.121.64.1/24 10.121.64.0 ether6
3 D 10.122.251.18/32 10.122.251.17 rb1200_stofli
On my ether6 network I have a PC that gets it's IP address from the rb1200 via dhcp
ip:10.121.64.253 subnet:255.255.255.0 gateway:10.121.64.1
On the rb1100 ( vpnserver ) I can ping the ether6 interface on the rb1200 ip:10.121.64.1
But I can't ping the PC on the rb1200 (vpnclient) network.
I have make a chain=forward log entry in the firewall
When I ping the PC from the rb1100, I see in the log on the rb1200:
09:11:17 firewall,info rules forward: in:rb1200_stofli out:ether6, proto ICMP (type 8, code 0), 10.122.251.17->10.121.64.253, len 50
Why can't I ping the PC on 10.121.64.253.
Regards
Marcel
More info from the rb1200 (vpnclient)
[admin@MikroTik] /ip firewall filter> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=input action=accept protocol=icmp
1 chain=input action=accept connection-state=established
in-interface=ether1-gateway
2 chain=input action=accept connection-state=related
in-interface=ether1-gateway
3 chain=forward action=log in-interface=rb1200_stofli log-prefix="rules"
[admin@MikroTik] /ip firewall nat> print
Flags: X - disabled, I - invalid, D - dynamic
0 chain=srcnat action=masquerade out-interface=ether1-gateway
[admin@MikroTik] /ip route> print
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 ADS 0.0.0.0/0 192.168.40.1 0
1 A S 10.121.0.0/16 rb1200_stofli 1
2 ADC 10.121.64.0/24 10.121.64.1 ether6 0
3 A S 10.122.0.0/16 rb1200_stofli 1
4 ADS 10.122.251.0/24 10.122.251.17 0
5 ADC 10.122.251.17/32 10.122.251.18 rb1200_stofli 0
6 ADC 192.168.40.0/24 192.168.40.74 ether1-gateway 0
7 ADC 192.168.88.0/24 192.168.88.1 ether10 0