OpenVPN Issues

RouterOS General
1

I just setup an openVpn with my RB450. It works fine. It is connecting to my pfSense box and the tunnel is created and basic traffic works. So here is the network map first, then my issue…

PFsense Box
Wan
Lan (192.168.100.0/24)
OpenVpn Server(192.168.101.0/24 with DHCP for the tunnel, endpoint is first address [192.168.101.1])

RB450
Wan (Eth1)
Lan (Eth 2,3,4 Bridged) (192.168.102.0/24)
OpenVPN Client (192.168.101.2 Static, as I could not determine how to make this use DHCP)

So the tunnel is created and from the 192.168.102.0 subnet, i can access the entire 192.168.100.0 subnet. The issue is the return trip, the PFsense router does not see outside the VPN tunnel (192.168.101.0 subnet). It does not route to the lan on the routerboard side, not sure how to make this happen, but I assume it involves making a bridge but all my attempts to make it work have failed.

Please assist.

2

No need for a bridge. You have to set up proper routing on PF sense box.
Add route to remote network reachable through the tunnel.

3

I am fairly sure my PF box is setup ok. I have routes for both the tunnel and remote endpoint setup and the box sees the remote subnet fine (192.168.102.0/24) but if it traceroute the connection is dropped at 192.168.101.2 (rb450 endpoint for the tunnel). I can communicate with the rb450 box fine. Is there anything else you can think of that could be causing the issue on the RB450 side?

4

I think I got it…
I had

route 192.168.100.0 255.255.255.0;

Instead of

push “route 192.168.100.0 255.255.255.0”;

Should work better now. at least it seems to route ok.

:smiley:

THX

5

Hello everyone!
I’m pretty new to Mikrotik ad RouterOS…

We are trying to connect some RB700 to an existing installation of pfSense that we use to as a VPNServer for 250/300 roadwarriors… we’d like to provide these appliance to customers who can’t install openvpn in their environment…

The problem is that we are unable to import certificates created by the pfSense box via the gui…