How to get Access to the Router over VPN ?

RouterOS General
1

Hello
Home base: pfSense with latest 23.9 as OpenVPN server, 192.168.1.0/24
Remote site: MikroTik hAP ax lite LTE6 with latest RouterOS as OpenVPN client, 192.168.88.0/24

the LTE router is connected to the pfSense, tunnel is up and running, both tunnel IP addresses are ping-able from both sides.
the IP address of the LTE router is 192.168.88.1 and is ping-able from a Windows nodebook connected to the home LAN, but how can I connect the LTE router over the VPN tunnel using a browser or Winbox.exe ?
What is missing to connect and to configure the LTE router from the home LAN ?
Thanks!

2

Install Back to Home app in your phone, when inside home, connect to router with this app. It will do everything for you.

https://apps.apple.com/lv/app/mikrotik-back-to-home/id6450679198
https://play.google.com/store/apps/details?id=com.mikrotik.android.freevpn

3

Want to have access to the LTE router (administration / configuration) from home when I’m connected via RDP from another remote site.
Can the web interface of the LTE router / 192.168.88.1 be enabled for the WAN for a specific source IP address? In my case it would be the public IP address of the OpenVPN server, the WAN IP address of the pfSense.
Thanks!

4

Making less sense … Draw a diagram, as nobody can guess whats inside your head.

5

Site A is my home base with pfSense and a public / fix IP address, LAN 172.16.10.0/24, PC_A is part of this LAN
Site_B is a remote site with MikroTik LTE router, LAN 172.16.20.0/24, the router has 172.16.20.1, PC_B is a Raspberry connect to the router via ethernet.
Site_C is a remote site with another pfSense … LAN 172.16.30.0/24

Site A and site B are connected with OpenVPN, ping from A to B and B to A is possible.

Now I want to connect the web configuration page of the MikroTik router (172.16.20.1) from the browser running on PC_A / 172.16.10.101 but not possible but “ping 172.16.20.1” is successful.

Why is it not able to connect from 172.16.10.101 to 172.16.20.1 over the VPN tunnel from A to B? What is blocking this access to the web configuration of the MT router?
Thanks
image001.png