Hello,
I am trying to set up an OpenVPN bridged network. Situation:
- Out-of-the box config of a RB951 (192.168.88.0 network, ether1-gateway).
- Unifi AP connected to ether 2
- My laptop connected to ether3
Ofcourse, in this situation, I can manage the AP easily. However, I want to put this set up on another site but I want to manage the Unifi AP from my home. So I want to create a OpenVPN bridge to manage my AP like I am physically at the site.
Normal routed VPNs are no problem, but then I can’t ping my laptop from the Unifi AP (I can ping the Unifi AP from my laptop).
I want to create the network by using http://wiki.mikrotik.com/wiki/OpenVPN#Bridge_mode but they use other IP adresses and there is already a bridge-local (default config).
My current config:
/interface bridge
add admin-mac=xxxxxxxxx auto-mac=no name=bridge-local
/interface ovpn-server
add name=ovpn-client user=testuser
/ppp profile
set *FFFFFFFE bridge=bridge-local local-address=default-dhcp remote-address=\
default-dhcp
/interface ovpn-server server
set certificate=ca-template cipher=blowfish128,aes128,aes192,aes256 \
default-profile=default-encryption enabled=yes mode=ethernet \
require-client-certificate=yes
I can connect to the MT through VPN perfectly, I get an IP address in 192.168.88.0 network and I can ping devices in the network, but the devices can’t ping me (also I see different adresses, IP address in OVPN active connections is different address than in DHCP Server Active Leases).
What can I do to realise that the devices in the network can ping the ovpn client device?