shared openvpn server with differents sub-network

RouterOS General
1

Hello,

I actually try to create different vpn who have to be separate each one from each other but on the same mikrotik. I don’t have to think abut the certificate since i use a freeradius server to authenticate my clients. The point is to use less mikrotik in my infrastructure because i will create a lot of openvpn server.

For what I’ve read it’s impossible to create directly more than one openvpn server on each mikrotik so, it is possible to subdivide my server into different pool of ip who are separate ? (like: if i have my ovpn pool which is 10.8.0.0/16 can i create two independent network like this: 10.8.1.0/24 and 10.8.2.0/24 into openvpn ?)

2

I use static IP addresses on my OpenVPN secrets, so there it is very easy to just make firewall rules to limit what each OpenVPN user can access.

I have not attempted to use DHCP on OpenVPN tunnels yet, so I do not know if that is possible.
But I think it would be possible if you just make sure that each group of OpenVPN users have their own PPP profile with specific IP pools defined. I however see no explanation about how the IP pools work when defined in a PPP profile.
See: http://wiki.mikrotik.com/wiki/Manual:PPP_AAA