OpenVPN Problem: Connection reset, restarting [0]

RouterOS General
1

Hi everyone,
I’m fairly new with Mikrotik and I’ve been having issues when configuring a OpenVPN server on my Mikrotik Router. My router is the model RB4011.
Here’s the deal, when I always try to connect to the VPN I get this log:

2021-09-22 12:11:05 TCP connection established with [AF_INET][WAN of my Router]
2021-09-22 12:11:05 TCP_CLIENT link local: (not bound)
2021-09-22 12:11:05 TCP_CLIENT link remote: [AF_INET][WAN of my Router]
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,WAIT,
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,AUTH,
2021-09-22 12:11:05 TLS: Initial packet from [AF_INET][WAN of my Router], sid=b1e4a18b 1a34197c
2021-09-22 12:11:05 VERIFY OK: depth=1, CN=ca
2021-09-22 12:11:05 VERIFY KU OK
2021-09-22 12:11:05 Validating certificate extended key usage
2021-09-22 12:11:05 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-09-22 12:11:05 VERIFY EKU OK
2021-09-22 12:11:05 VERIFY OK: depth=0, CN=server
2021-09-22 12:11:05 Connection reset, restarting [0]
2021-09-22 12:11:05 SIGUSR1[soft,connection-reset] received, process restarting
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,RECONNECTING,connection-reset,
2021-09-22 12:11:05 Restart pause, 80 second(s)
2021-09-22 12:12:25 MANAGEMENT: >STATE:1632305545,RESOLVE,
2021-09-22 12:12:25 TCP/UDP: Preserving recently used remote address: [AF_INET][WAN of my Router]
2021-09-22 12:12:25 Socket Buffers: R=[65536->65536] S=[64512->64512]
2021-09-22 12:12:25 Attempting to establish TCP connection with [AF_INET][WAN of my Router] [nonblock]

On the attachment you can see the log on my router.
I’ve been trying to have OpenVPN working for more than a week, I’ve retried the process of configuring openVPN over and over with no luck. Here’s what I’ve done:

  • I created 3 certificates, the CA, the one for the server and a client, the three of them with the recommended configuration that’s on the wiki


  • I exported the CA and the client certificate with a passphrase


  • I configured the server to require a client certificate, it uses the server certificate and it uses sha1/aes256


  • I created a PPP profile with a local address(192.168.74.1) and a remote address(IP pool, 192.168.74.2-192.168.74.250)


  • I created a PPP secret for the user with the certificate I created previously, this secret uses the PPP profile I created and it uses the ovpn service


  • I configured the default ovpn config file on the client-side with the options mentioned in the wiki, it also uses a secret.cfg

I hope I’ve explained myself properly but I really don’t know what’s wrong with my configuration.
Thank you in advance!
errorMikrotik.png

2

Hello, did you get this resolved? I have the same log output in my OPNVPN (Windows10) client. So far, I have not found out what the cause of the issue is and would like to know as well.

3

This is probably not what you want to hear, but OpenVPN is the thing I had the most problems with, coming over from Ubiquiti EdgeRouters.
Mikrotik’s implementation is just too non-standard and I never got it to reliably work.

The good point is that I had to move for other reasons, and it pushed me towards testing of WireGuard, which is a worthy replacement in most of my usecases. Your mileage may vary, but it’s worth looking at other VPN options if you’re using Mikrotik.