well what you are saying is exactly my problem .
simply speaking , I want to use a broader IP pool with openvpn (10.10.0.2-10.10.1.254 ) but since the local address of PPP profile is set as 10.10.0.1, users getting IPs between 10.10.1.0 to 10.10.1.254 don’t have internet access because as you can see in my windows route output , the client is assigned 10.10.1.254 but the gateway ( PPP profile local address ) is 10.10.0.1 which causes issues . Because of this problem , I had to limit IP pool to 10.10.0.2-10.10.0.254 but this is also causing issues for me because I’m running out of IPs for users .
For some weird reason , when clients disconnect , their IPs not freed and mikrotik keeps assigning other free IPs to clients until it runs out of them . Even when it runs out of IPs to assign , it doesn’t use those freed IPs and keeps reserving them for a client that might not connect !
For this I had to set a schedule to reboot router every 24hours so the IP assignment is started from beginning ( 10.10.0.254 , 10.10.0.253 … )
And here is what you wanted . The config of server when openvpn IP pool is 10.10.0.2-10.10.1.254 :
[admin@MikroTik] > export
# jul/19/2023 16:42:51 by RouterOS 7.6
# software id =
#
/interface ethernet
set [ find default-name=ether1 ] disable-running-check=no
/interface ipipv6
add local-address=2001:470:1f0a:aa::2 mtu=1440 name=ipipv6-tunnel1 \
remote-address=2001:470:1f0a:bc::2
/interface 6to4
add comment="Hurricane Electric IPv6 Tunnel Broker" !keepalive local-address=\
Public IP mtu=1480 name=sit1 remote-address=216.66.80.30
/interface lte apn
set [ find default=yes ] ip-type=ipv4 use-network-apn=no
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip pool
add name=l2tp ranges=10.8.0.2-10.8.0.254
add name=openvpn ranges=10.10.0.2-10.10.1.254
/ppp profile
add dns-server=8.8.8.8,1.1.1.1 local-address=10.8.0.1 name=l2tp remote-address=\
l2tp
add change-tcp-mss=yes dns-server=8.8.8.8,1.1.1.1 local-address=10.10.0.1 name=\
openvpn remote-address=openvpn
/snmp community
set [ find default=yes ] addresses=0.0.0.0/0
/ip neighbor discovery-settings
set discover-interface-list=none protocol=""
/ip settings
set max-neighbor-entries=8192
/ipv6 settings
set max-neighbor-entries=8192
/interface l2tp-server server
set caller-id-type=number default-profile=l2tp enabled=yes use-ipsec=required
/interface ovpn-server server
set auth=sha1 certificate=server cipher=aes128,aes192,aes256 default-profile=\
openvpn enabled=yes
/interface pptp-server server
# PPTP connections are considered unsafe, it is suggested to use a more modern VPN
protocol instead
set authentication=pap,chap,mschap1,mschap2 default-profile=default
/ip address
add address=Public IP/24 interface=ether1 network=Gateway IP
/ip dns
set servers=8.8.8.8,1.1.1.1,9.9.9.9
/ip firewall filter
add action=accept chain=input dst-port=1723 protocol=tcp
add action=accept chain=input dst-port=1194 protocol=tcp
add action=accept chain=input dst-port=500 protocol=udp
/ip firewall nat
add action=masquerade chain=srcnat
/ip route
add disabled=no dst-address=0.0.0.0/0 gateway=191.101.91.1
add disabled=no dst-address=0.0.0.0/0 gateway=191.101.91.1
add gateway=GatewayIP
/ipv6 route
add disabled=no distance=1 dst-address=2000::/3 gateway=2001:470:1f0a:aa::1 \
scope=30 target-scope=10
/ip service
set telnet disabled=yes
set ftp disabled=yes
set www disabled=yes
set ssh disabled=yes
set api disabled=yes
set winbox port=2222
set api-ssl disabled=yes
/ipv6 address
add address=2001:470:1f0a:aa::2 advertise=no interface=sit1
/ipv6 nd
set [ find default=yes ] advertise-dns=no
/ppp aaa
set interim-update=30s use-circuit-id-in-nas-port-id=yes use-radius=yes
/radius
add address=RadiusIP service=ppp,hotspot
/radius incoming
set accept=yes
/system clock
set time-zone-name=Asia/Beijing
/system ntp client
set enabled=yes
/system ntp server
set manycast=yes
/system ntp client servers
add address=45.129.39.118
/system scheduler
add interval=1d name="Reboot Router Daily" on-event="/system reboot" policy=\
ftp,reboot,read,write,policy,test,password,sniff,sensitive,romon \
start-date=jan/01/1970 start-time=00:10:00
