OPEN VPN routing

RouterOS General
1

Hi guys,

I made routed OpenVPN site-to-site between site A (server side 192.168.1.0/24, router IP 192.168.1.1, VPN IP 10.0.0.1) and site B (client side 192.168.2.0/24, router IP 192.168.2.1, with VPN IP 10.0.0.2). Site A is reachable from site B and vice versa. Also all computers are pingable.

If I ping from site A (lets say from 192.168.1.2) to site B (lets say to 192.168.2.5) and I am monitoring on router on site B with TORCH function all icmp packets on bridge1 interface, I see that icmp packets are comming from 10.0.0.1.

Is it possible to make some routing or something so I will be able to see on site B exactly from which IP those icmp packets are comming (I would like to see that packets are coming from 192.168.1.2 instead of 10.0.0.1).

2

Yes, by setting NAT rules properly. Most likely right now you are masquerading everything.

3

Yes, i tried with masquerading all. What should be the proper nat rule?

4

You need to nat only traffic that you need to nat. Do not set rules to masquerade everything.