I have Mikrotik with OpenVPN server, and when client connect, it create dynamic address item in /ip addresses. I have problem with route that Is created with this address item.
Is aby possibility how to deny creating address item oř route when ovpn client connect?
Thank you
Hm, it seems that you have to specify some local-address and remote-address in the /ppp secret or /ppp profile for the OpenVPN client even if the openvpn server runs in mode=ethernet (not sure whether it is a bug or a feature), but you may use already existing address as the local one so adding it should cause no real harm. It may help you to set netmask under /interface ovpn-server server to 32. However, in your setup you end up with an IP address assigned to a bridge port at server side, which is normally forbidden.
Hmm, thank you, i’ll try it.
I resolved it with on-up script in ovpn profile - here delete created route.
Rob