Hello
I’ve got MikroTik RouterOS 5.26. On this router we have openVPN client configured which connects to our openvpn server.
LAN network is 192.168.88.0/24 OpenVPN network is 10.10.0.0/24
Up until today, we were able to ping and access machines in the vpn network, so:
ping from 192.168.88.22 was able to reach 10.10.0.3
Something happened today, I am not sure what, but this has stopped working without any apparent reason.
I made sure that connecting my machine directly to openvpn allows me to ping all machines in VPN so it seems that it’s a problem with the configuration of the router.
Nobody touched anything on it, thus I’m a bit shocked that it suddenly stopped working.
First of all, I made sure that mikrotik connects to vpn - it does.
Then I made sure I can ping openvpn gateway from router - i can’t
I have checked if when connecting directly to the openvpn I can ping the gateway and other devices - I can
I have checked if the route is automatically created on the router - it is
[admin@MikroTik] > /ip route print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 xx.xx.xx 1
1 ADC 10.10.0.0/24 10.10.0.100 ovpn-out1 0
2 ADC xx.xx.xx.xx/28 yy.yy.yy.yy ether1-gateway 0
3 ADC 192.168.88.0/24 192.168.88.1 bridge-local 0
I have checked if the route is used when trying to reach 10.10.0.1 - it is
[admin@MikroTik] > /ip route print where 10.10.0.1 in dst-address
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
# DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 xx.xx.xx.xx 1
1 ADC 10.10.0.0/24 10.10.0.100 ovpn-out1 0
Then I went to the server and started tcp dump to check if there’s any traffic coming and… there was.
It actually looks like all of the traffic goes through vpn, which is not something I would want. I have a masquarade setup on the 10.10.0.0/24 network on the vpn server, which allows the devices in the 10.10.0.0 network to access the internet [those are virtual machines] but i didn’t expect the openvpn client on mikrotik to pass all data through it.
At the same time, I still cannot ping 10.10.0.1 from the gateway.
I am lost at the moment, is there anything I am missing?
Thanks
Krystian
EDIT:
I can actually ping devices from the 10.10.0.0 network apart from 10.10.0.1 and there’s nothing on the device which would block it. Has to be something with the config of the router [like mentioned earlier, when connecting to the VPN service from my computer directly, I can ping 10.10.0.1 without any problems].