OpenVPN connects, but doesn't allow connecting to LAN

RouterOS General
1

I have the OpenVPN server set up, and my OpenVPN client is able to connect.
Once connected, it can ping and open the webadmin to the RouterOS.

However, I cannot ping or otherwise connect to devices on the LAN.

The LAN subnet is 192.168.1.0/24
The IP address assigned via OpenVPN is 192.168.1.241

Any likely suspects? Some firewall rule that needs creating? Some extra steps to add routing?

2

Is there a route to your LAN on the OVPN conifig ?

For example ( part of OVPN config):

# Add route for Remote Host's Subnet
route 192.168.10.0 255.255.255.0
3

Apologies - I’ve never configured a MikroTik device before. There were dozens of different guides on the internet. The one I followed did not have me add any route.

That said, the LAN subnet is 192.168.1.0/24, and the IP address assigned to this OpenVPN user profile is 192.168.1.241.

4

Is the OPVN client a Compuer or an other Mikrotik device ?

5

It is a PC running the OpenVPN client.

This is a client-to-gateway setup, not a gateway-to-gateway.

6

As i mentioned in my previous post, in your OVPN client’s config you should add a Route for your local network…

What is your LAN subnet ? The same are you are using on the OVPN server ?

7

I added the route line to my OVPN config file and reconnected. Doing a “route print” from the client computer has this


      
      192.168.1.0    255.255.255.0         On-link     192.168.1.241    281
      192.168.1.0    255.255.255.0      192.168.1.1    192.168.1.241    281
    192.168.1.241  255.255.255.255         On-link     192.168.1.241    281



However, I am still unable to access anything other than the router (192.168.1.1).

8

Is the OVPN server configured in ethernet or IP mode ?
You can try the IP mode and use different addresses for the OVPN than your network.. Then add the Route to your Client…

I can see you are using the same IP address space for the OVPN server as your LAN network… So the Route is not needed in your case …

9

It was already set to IP mode.

I updated the profile to:

Local Address:  192.168.200.1
Remote Address:  192.168.200.1

And put in the route in the client config

route 192.168.1.0 255.255.255.0

That did the trick. I am now able to connect to devices on the LAN.

Thank you very much!

10

Great to know…

Can you enable proxy-arp on your Bridge and let your configuration as it was before, does it work now?

11

I had the same problem. My network was;
Router IP 192.168.15.1
OpenVPN Local IP 192.168.15.2
OpenVPN Remote IPs IP 192.168.15.3 - IP 192.168.15.49
DHCP Server Pool was 192.168.15.50 - IP 192.168.15.250

proxy-arp was fixed my problem thank you so much.