Hello,
I have been trying to get OpenVPN working on mikrotik for day and failed..
So I decided to create an OpenVPN server on another box on the same network.
When I try to connect to the vpn server from Windows vlient, I keep getting
Tue Jul 19 10:51:52 2016 read UDPv4: Connection reset by peer (WSAECONNRESET) (code=10054)
Tue Jul 19 10:52:22 2016 TLS Error: TLS key negotiation failed to occur within 60 seconds (check your network connectivity)
Tue Jul 19 10:52:22 2016 TLS Error: TLS handshake failed
My understanding is that I misconfigured the mikrotik firewall rule but as I an knew to mikrotik, I’m struggling to see where I went wrong.
Could someone please help?
[admin@MikroTik] > /ip firewall filter print
Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward
1 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp log=no log-prefix=""
2 ;;; defconf: accept established,related
chain=input action=accept connection-state=established,related log=no log-prefix=""
3 chain=input action=accept protocol=tcp dst-port=1194 log=no log-prefix=""
4 ;;; defconf: drop all from WAN
chain=input action=drop in-interface=ether1 log=no log-prefix=""
5 ;;; defconf: fasttrack
chain=forward action=fasttrack-connection connection-state=established,related log=no log-prefix=""
6 ;;; defconf: accept established,related
chain=forward action=accept connection-state=established,related log=no log-prefix=""
7 ;;; defconf: drop invalid
chain=forward action=drop connection-state=invalid log=no log-prefix=""
8 ;;; defconf: drop all from WAN not DSTNATed
chain=forward action=drop connection-state=new connection-nat-state=!dstnat in-interface=ether1 log=no log-prefix=""
[admin@MikroTik] > /ip firewall nat print
Flags: X - disabled, I - invalid, D - dynamic
0 ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface=ether1 log=no log-prefix=""
1 chain=dstnat action=dst-nat to-addresses=192.168.88.25 to-ports=1194 protocol=udp in-interface=ether1 dst-port=1194 log=yes log-prefix=""
Thank you in advance