I’m following the MT OpenVPN tutorial http://wiki.mikrotik.com/wiki/OpenVPN. Normally OpenVPN on Linux sets up its own private 10.8.0.0/24 subnet that clients appear to be using, and then I have some code that allows them to tunnel back out to the Internet appearing to come from the WAN IP like:
vi /etc/sysctl.conf
net.ipv4.ip_forward=1
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
iptables -A FORWARD -i tun0 -s 10.8.0.0/24 -o eth0 -j ACCEPT
iptables-save > /etc/iptables.up.rules
Do I need to explicitly create the 10.8.0.0/24 in RouterOS, or is it created already by the OpenVPN daemon? On Linux you just edit /etc/openvpn/openvpn.conf. What do you do on RouterOS on a RB750? My LAN is 192.168.3.1/24 which is on a 2-5 port bridge, with the WAN a public static on ether1 of 1.2.3.4/27. Other than that it’s a very simple flat network.
I want clients to be pushed a 10.8.0.x/24 IP and route and be able to see boxes on the MT LAN like 192.168.3.5/24 and also the Internet seen as coming from 1.2.3.4/27.