OpenVPN client behind NAT'd public IP looses network connectivity

Hi there,

I recently got a business connection from my ISP with a few static IPs. Through the 951G (v6.22), I’ve used NATing to link some of the public IPs with some private IPs. I also setup hairpin NATing, and this all works fine.

Just today though, I noticed that when I try to connect to a VPN from a local machine that has a public IP NAT’d to it, I loose all network connectivity from it. The VPN is located outside of my LAN, and I seem to be able to connect to it correctly. Once connected though, there is no further network connectivity and only pinging 192.168.0.1 succeeds, I can’t even ping the VPN gateway IP.

I presume I’ve made an error in my configuration. Has anyone come across this situation before, any suggestions?

I have included some details about my setup below -

Network setup:

                                          /-------- Machine 1 (192.168.0.2 -> 1.1.1.2) with OpenVPN
WAN ------ MikroTik (192.168.0.1) -------/
           public IPs: 1.1.1.1           \
                       1.1.1.2            * And more systems...
                       etc.

NAT:

0 ;;; Access SERVER
   chain=dstnat action=dst-nat to-addresses=192.168.0.2 dst-address=1.1.1.1.2 log=no log-prefix="" 
1  chain=srcnat action=masquerade src-address=192.168.0.0/24 dst-address=192.168.0.2 out-interface=bridge-local log=no log-prefix=""
2 ;;; default configuration
   chain=srcnat action=masquerade out-interface=ether1-gateway log=no log-prefix=""