Hello,
I have an OpenVPN server behind mikrotik, and I cant make it work. I tried it on a simple home router, and it was ok. With Mikrotik, I cant even connect from LAN. I opened the corresponding UDP port, I made a NAT rule to translate the outer IP to the LAN ip of the server. I added 10.8.0.0/24 network to addresses and to networks in DHCP server. My Win10 computer is not able to connect.
The log says that there is a problem with the gateway availability, so there might be some missing configuration on mikrotik.
I added this to the server, and it was ok after reboot:
iptables -t nat -A POSTROUTING -s 10.8.0.0/24 -o eth0 -j MASQUERADE
Can someone give an advice? I attached the client log to this post.
Does your router know about 10.8.0.0/24? If the masquerade rule on server helped, then probably not. The other way instead of masquerade would be to add route:
/ip route
add dst-address=10.8.0.0/24 gateway=<whatever IP address in LAN the server has>
I have a fresh openVPN server on 10.1.8.2, client gets ip 10.20.1.5/10.20.1.6 from server ifconfig push.
In server config, there is a line: server 10.100.100.0 255.255.255.0, because all not static clients should get IP from this range. Client says that gateway is not reachable of 10.100.100.0.
There are more subnets in the network, the router is sitting on 10.0.0.1.
Port is open and there is NAT for translating incoming packets to openVPN server IP.
I don’t remember details about openvpn config, but 10.100.100.0 with 255.255.255.0 as mask is wrong device/gateway address, because it’s network address. I’d try with .1 at the end.