Community discussions

MikroTik App
 
wispmikrotik
Member Candidate
Member Candidate
Topic Author
Posts: 138
Joined: Tue Apr 25, 2017 10:43 am

OpenVPN with UDP not working beta3

Thu Oct 24, 2019 11:01 am

HW: mAP Lite
ROS: 7.0beta3

OpenVPN UDP: The connection to the server occurs, but it is not navigated through the VPN.

Configuration:
[admin@rt01_v7] > /export hide-sensitive                                                                                                      
# oct/24/2019 09:40:35 by RouterOS 7.0beta3                                                                                                   
# software id =                                                                                                                      
#                                                                                                                                             
# model = RouterBOARD mAP L-2nD                                                                                                               
# serial number = 73B207163703                                                                                                                
/interface bridge                                                                                                                             
add fast-forward=no name=loopback600 protocol-mode=none                                                                                       
/interface wireless                                                                                                                           
set [ find default-name=wlan1 ] ssid=MikroTik                                                                                                 
/interface wireless security-profiles                                                                                                         
set [ find default=yes ] supplicant-identity=MikroTik                                                                                         
/ip hotspot profile                                                                                                                           
set [ find default=yes ] html-directory=flash/hotspot                                                                                         
/ppp profile                                                                                                                                  
add local-address=172.18.0.1 name=pVPN remote-address=172.18.0.2 use-ipv6=no use-mpls=no use-upnp=no                                          
/interface ovpn-server server                                                                                                                 
set auth=sha1 certificate=server_ovpn.crt cipher=aes128,aes192,aes256 default-profile=pVPN enabled=yes port=1198 protocol=udp \               
    require-client-certificate=yes                                                                                                            
/ip address                                                                                                                                   
add address=192.168.134.1 interface=loopback600 network=192.168.134.1                                                                         
/ip dhcp-client                                                                                                                               
add dhcp-options=clientid,clientid_duid,hostname disabled=no interface=ether1                                                                 
/ip firewall nat                                                                                                                              
add action=masquerade chain=srcnat out-interface=ether1                                                                                       
add action=masquerade chain=srcnat out-interface=all-ppp                                                                                      
/ip firewall service-port                                                                                                                     
set ftp disabled=yes                                                                                                                          
set tftp disabled=yes                                                                                                                         
set irc disabled=yes                                                                                                                          
set h323 disabled=yes                                                                                                                         
set sip disabled=yes                                                                                                                          
set pptp disabled=yes                                                                                                                         
set udplite disabled=yes                                                                                                                      
set dccp disabled=yes                                                                                                                         
set sctp disabled=yes                                                                                                                         
/ip service                                                                                                                                   
set www-ssl certificate=www-ssl.crt disabled=no                                                                                               
#error exporting /ipv6/route/rule                                                                                                             
/ppp secret                                                                                                                                   
add name=ops12 profile=pVPN service=ovpn                                                                                                        
#error exporting /routing/policy/selection                                                                                                    
/system clock                                                                                                                                 
set time-zone-name=Europe/Madrid                                                                                                              
/system identity                                                                                                                              
set name=rt01_v7                                                                                                                              
/system package update                                                                                                                        
set channel=development

Logs:

Image
09:54:30 ovpn,debug <X.X.X.X>: disconnected <poll error>

Captures:

Image

Image


Regards.
 
ssbaksa
newbie
Posts: 31
Joined: Tue Oct 20, 2015 10:38 am

Re: OpenVPN with UDP not working beta3

Sun Oct 27, 2019 7:48 pm

HW: mAP Lite
ROS: 7.0beta3

OpenVPN UDP: The connection to the server occurs, but it is not navigated through the VPN.

Works for me on RB750. Disregard IPSec parts in config below.
Didn't have time to test TCP vs. UDP speed but i have done upload to RPi (1b+) which act as test server behind VPN and it gained solid 2MB/sec with
processor load between 5 and 75%

[admin@Test-Slave] > /export hide-sensitive
# oct/27/2019 18:40:26 by RouterOS 7.0beta3
#
# model = 750G
# serial number = 268D01789F7A
/interface wireless security-profiles
set [ find default=yes ] supplicant-identity=MikroTik
/ip ipsec mode-config
add name=Test-cfg responder=no src-address-list=test
/ip ipsec profile
add dh-group=modp2048 enc-algorithm=aes-256 hash-algorithm=sha256 name=FirmaEN nat-traversal=no
/ip ipsec peer
add address=192.168.0.254/32 disabled=yes exchange-mode=ike2 local-address=192.168.52.1 name=FirmaEN profile=FirmaEN
/ip ipsec proposal
add auth-algorithms=sha256 disabled=yes enc-algorithms=aes-256-cbc lifetime=1h name=FirmaEN pfs-group=modp2048
/ip pool
add name=local ranges=192.168.62.1-192.168.62.10
add name=OpenVPN ranges=192.168.54.1-192.168.54.10
/ip dhcp-server
add address-pool=local disabled=no interface=ether2 name=local
/ppp profile
add change-tcp-mss=yes local-address=192.168.54.254 name=OpenVPN remote-address=OpenVPN use-encryption=yes
/interface ovpn-server server
set auth=sha1 certificate=test2-gw.crt_0 cipher=aes256 default-profile=OpenVPN enabled=yes protocol=udp require-client-certificate=yes
/ip address
add address=192.168.52.1/24 interface=ether1 network=192.168.52.0
add address=192.168.62.254/24 interface=ether2 network=192.168.62.0
add address=192.168.63.10 disabled=yes interface=ether3 network=192.168.63.10
/ip dhcp-server network
add address=192.168.62.0/24 dns-server=192.168.62.254 gateway=192.168.62.254 netmask=24
/ip dns
set allow-remote-requests=yes servers=192.168.0.254
/ip firewall address-list
add address=192.168.62.0/24 list=test
/ip firewall nat
add action=src-nat chain=srcnat dst-address=10.200.222.2 protocol=icmp to-addresses=192.168.62.1
/ip ipsec identity
add disabled=yes peer=FirmaEN
/ip ipsec policy
add disabled=yes dst-address=10.200.222.2/32 peer=FirmaEN proposal=FirmaEN protocol=icmp src-address=192.168.62.1/32 tunnel=yes
add disabled=yes dst-address=10.200.222.2/32 dst-port=22 peer=FirmaEN proposal=FirmaEN protocol=tcp src-address=192.168.62.1/32 tunnel=yes
/ip route
add dst-address=0.0.0.0/0 gateway=192.168.52.254
#error exporting /ipv6/route/rule
/ppp secret
add name=sbaksa profile=OpenVPN service=ovpn
#error exporting /routing/policy/selection
/system clock
set time-zone-name=Europe/Zagreb
/system identity
set name=Test-Slave
/system leds
add leds=user-led type=on
/system ntp client
set enabled=yes
/system ntp client servers
add address=161.53.123.5
add address=161.53.160.5
 
wispmikrotik
Member Candidate
Member Candidate
Topic Author
Posts: 138
Joined: Tue Apr 25, 2017 10:43 am

Re: OpenVPN with UDP not working beta3

Tue Dec 17, 2019 11:35 am

Description
Device: mAPLite
Version: v7.0beta4
Issue: OpenVPN with UDP not working.

UDP does not work properly, you can connect, but you do not browse, and it disconnects only within a few seconds.
 
hamedta
just joined
Posts: 7
Joined: Fri Aug 30, 2019 9:46 pm

Re: OpenVPN with UDP not working beta3

Tue Feb 25, 2020 9:26 am

Hi, I am using a Mikrotik router so as to connect to my remote network through OpenVpn UDP protocol, I used RouterOS 7 beta, it connects but there is no route to Internet, can someone check my configs to see if there is any problem ?

I can't use TCP protocol, so do you think isntalling OpenWRT on the router could be a better solution ?
01.jpg
You do not have the required permissions to view the files attached to this post.

Who is online

Users browsing this forum: carcuevas and 29 guests