OVPN client connects but no reply

[erdemefe]

On the Mikrotik can you ping 10.81.234.129?

On the Mikrotik can you trace route to 10.0.10.119, do you see the intermediate hops?

If so, perhaps 10.0.10.119 doesn’t respond to pings (from non local subnet)?
Could you ping this IP when connected via your computer?

You could add openvpn to system/logging for a while and see if the extra logs give any hints.

/system logging action
add action=memory topics=ovpn


Some other thoughts (though low probability of helping)

You could disable your route to 10.0.10.0/23 as it seems to have received one from the server, and the static
one might be causing issues.

You have not shown any firewall rules.

Perhaps add a firewall rule to allow the openvpn traffic in.

If somewhat near default, you may need to make the openvpn interface a member of the WAN interface list.

Thanks for your answer,

i can’t ping 10.81.234.129 it is OVPN remote ip

trace route does not reply any hop

i can ping 10.81.234.129 from 10.0.10.119 pc but can’t ping 10.81.234.130

I said that the ovpn-server did not respond, but I guess it is not transmitted at all. Because I cannot ping the local address of the ovpn-server too.

My firewall like this;

add action=accept chain=input comment="defconf: accept established,related,untracked" connection-state=established,related,untracked
add action=drop chain=input comment="defconf: drop invalid" connection-state=invalid log-prefix=def_drop
add action=accept chain=input comment="defconf: accept ICMP" protocol=icmp
add action=accept chain=input comment="defconf: accept to local loopback (for CAPsMAN)" dst-address=127.0.0.1
add action=accept chain=input comment=Winbox disabled=yes dst-port=8291 in-interface-list=WAN protocol=tcp
add action=accept chain=input comment="NAS SSH" disabled=yes dst-port=8022 in-interface-list=WAN protocol=tcp
add action=accept chain=input comment="Gitea SSH" dst-port=22 in-interface-list=WAN protocol=tcp
add action=accept chain=input comment="OpenVpn Server " dst-port=11949 in-interface-list=WAN protocol=tcp
add action=accept chain=input comment=Nginx dst-port=80,443 in-interface-list=WAN protocol=tcp
add action=accept chain=input comment=Mosquitto dst-port=1883 in-interface-list=WAN protocol=tcp
add action=drop chain=input comment="defconf: drop all not coming from LAN" in-interface-list=!LAN
add action=accept chain=forward comment="defconf: accept in ipsec policy" ipsec-policy=in,ipsec
add action=accept chain=forward comment="defconf: accept out ipsec policy" ipsec-policy=out,ipsec
add action=fasttrack-connection chain=forward comment="defconf: fasttrack" connection-state=established,related hw-offload=yes
add action=accept chain=forward comment="defconf: accept established,related, untracked" connection-state=established,related,untracked
add action=drop chain=forward comment="defconf: drop invalid" connection-state=invalid
add action=drop chain=forward comment="defconf: drop all from WAN not DSTNATed" connection-nat-state=!dstnat connection-state=new in-interface-list=WAN

Please Help me