How to route a device via OpenVPN

RouterOS General
1

Hello,

I (still) have problems to route a PC to my local network via OpenVPN.

The situation:

  • I’ve got RB411U running as OVPN-client connected to my local network.
    (That means i can ping from RB411U to my local network and vice versa)

  • The PC connected to RB411U cannot ping neither my local network nor the firewall itself.
    It seems that the ping package does not leave the RouterBoard, although I have a route for it…

Here is my routing table of RB411U:

 #      DST-ADDRESS        PREF-SRC        GATEWAY            DISTANCE
 0 ADS  0.0.0.0/0                          10.112.112.118     1
 1 A S  10.10.10.0/24                      ovpn               1
 2 ADC  10.10.10.1/32      10.10.10.10     ovpn               0
 3 ADC  10.112.112.118/32  77.25.194.85    Vodafone           0
 4 ADS  192.168.55.0/24                    10.10.10.1         1
 5 ADC  192.168.88.0/24    192.168.88.1    LAN                0

Please have also a look at the attached picture.

I have no clue, what the problem could be. If you have got any ideas, please don’t hesitate to post it here.
RB411U_Routing.JPG

2

What is the IP and routing table of your PC? What happen when you run traceroute from your PC?

3

The PC behind the RouterBoard has got the IP: 192.168.88.40

Its routes are:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
192.168.88.0    0.0.0.0         255.255.255.0   U     0      0        0 eth0
169.254.0.0     0.0.0.0         255.255.0.0     U     0      0        0 eth0
127.0.0.0       0.0.0.0         255.0.0.0       U     0      0        0 lo
0.0.0.0         192.168.88.1    0.0.0.0         UG    0      0        0 eth0

The traceroute from this PC to 192.168.55.x or to 10.10.10.1 (firewall ovpn-ip) has got only one step: to 192.168.88.1 (which is the RB411U).

When I ping to 192.168.55.x I can see in the RouterBoard logs, that the packet takes the right interface (ovpn), but then its lost:

10:06:29 firewall,info ICMP_LAN: in:LAN out:ovpn, src-mac 00:16:36:ab:da:8c, proto ICMP (type 8, code 0), 192.168.88.40->192.168.55.252, len 64