ovpn on ros 5.6 not working?

RouterOS General
1

hi there,

i have tried to setup ovpn server client on my test-equipment. but for some reason the client gets always dropped
from the server..

client-config:
[admin@MikroTik] /interface ovpn-client> print
Flags: X - disabled, R - running
0 name=“ovpn-out1” mac-address=02:24:C8:E3:E7:1A max-mtu=1500
connect-to=10.147.1.11 port=1194 mode=ethernet user=“test”
password=“1234” profile=default certificate=none auth=sha1
cipher=blowfish128 add-default-route=no

server-config:
/interface ovpn-server
add disabled=no name=ovpn-in1 user=“”
/interface ovpn-server server
set auth=sha1 certificate=cert1 cipher=blowfish128 default-profile=default
enabled=yes keepalive-timeout=60 mac-address=FE:EB:CD:3F:5B:FC max-mtu=1500
mode=ethernet netmask=24 port=1194 require-client-certificate=no

server-cert:
[admin@es-ss-eg] /certificate> print
Flags: K - decrypted-private-key, Q - private-key, R - rsa, D - dsa
0 KR name=“cert1” subject=C=AT,ST=LA,O=xxxx,CN=Server01,
emailAddress=xxxx
issuer=C=AT,ST=LA,L=xxx,O=xxx,CN=Server01,
emailAddress=xxxx
serial-number=“02” email=xxxx
invalid-before=aug/20/2011 07:34:30 invalid-after=aug/17/2021 07:34:30
ca=yes

the ppp section on the server:
/ppp profile
set default change-tcp-mss=yes name=default only-one=default use-compression=no
use-encryption=no use-ipv6=no use-mpls=no use-vj-compression=no
set default-encryption change-tcp-mss=yes name=default-encryption only-one=
default use-compression=default use-encryption=yes use-ipv6=yes use-mpls=
default use-vj-compression=default
/ppp aaa
set accounting=yes interim-update=0s use-radius=no
/ppp secret
add caller-id=“” disabled=no limit-bytes-in=0 limit-bytes-out=0 local-address=
10.147.1.11 name=test password=1234 profile=default remote-address=
10.10.10.2 routes=“” service=any




client-log:
16:43:56 ovpn,debug ovpn-out1: disconnected <peer disconnec
16:43:56 ovpn,info ovpn-out1: terminating… - peer disconn
16:43:56 ovpn,info ovpn-out1: disconnected
16:44:01 ovpn,info ovpn-out1: initializing…
16:44:01 ovpn,info ovpn-out1: dialing…
16:44:01 ovpn,debug ovpn-out1: disconnected <peer disconnec
16:44:01 ovpn,info ovpn-out1: terminating… - peer disconn
16:44:01 ovpn,info ovpn-out1: disconnected
16:44:06 ovpn,info ovpn-out1: initializing…
16:44:06 ovpn,info ovpn-out1: dialing…
16:44:06 ovpn,debug ovpn-out1: disconnected <peer disconnec
16:44:06 ovpn,info ovpn-out1: terminating… - peer disconn
16:44:06 ovpn,info ovpn-out1: disconnected

server-log:
18:47:36 ovpn,info TCP connection established from 10.147.15.2
18:47:41 ovpn,info TCP connection established from 10.147.15.2
18:47:46 ovpn,info TCP connection established from 10.147.15.2
18:47:51 ovpn,info TCP connection established from 10.147.15.2
18:47:56 ovpn,info TCP connection established from 10.147.15.2
18:48:01 ovpn,info TCP connection established from 10.147.15.2
18:48:06 ovpn,info TCP connection established from 10.147.15.2
18:48:11 ovpn,info TCP connection established from 10.147.15.2
18:48:16 ovpn,info TCP connection established from 10.147.15.2

i am really wondering, why i see on the serverlog just the tcp connection and nothing more??

any help would be highly appreciated!

thanks!

chris

p.s.: i have tested the setup with “SSTP” and the server and client certificate - and this was working immediately.

2

Is it working on 5.5 for you? What happens when you downgrade without changing anything else?

I have been complaining about OpenVPN in ROS for years and I’m now running it more or less without problems on 5.5

As far as I can tell only 5.5 and 5.4 can run OpenVPN without internal crashes … and I have been testing it extensively since it appeared in some 3.x version.

GL

3

I can confirm that OVPN on ROS 5.6 is completely broken.
I did read all the WiKi’s and forums around the web and I was struggling hard to get it working. In ROS logs it showed only:

ovpn,info TCP connection established from

and the OVPN GUI in Windows showed that the connection was reset and that’s all. I couldn’t get any clue until I got to this topic on this forum.
I’ve downgraded to 5.5 and now it’s fully operational! Connected like magic.

RB493AH

4

Having this issue too… ROS openvpn logger is useless.

Always something broken with MikroTik…

5

I rebooted and it came online, not gonna touch my config because I fear it might break again (: