Hello. I have a problem with configuring the OPENVPN server. Server is running, I am testing via phone and tablet via LTE and both devices get ip from my home network. I have a problem with access to the LAN. From the outside I have access only to the Mikrotik router. From computers inside the LAN, I can ping external devices (tablet and phone). The connection from the inside works. It does not work the other way.

MikroTik LAN IP: 192.168.3.1
LAN DHCP: static

I have set "proxy-arp" for LAN.

/ip pool print
0 openvpn 192.168.3.85-192.168.3.90



ip firewall filter print detail

Flags: X - disabled, I - invalid, D - dynamic
0 D ;;; special dummy rule to show fasttrack counters
chain=forward action=passthrough

1 chain=input action=accept protocol=tcp dst-port=1194 log=no log-prefix=""

2 ;;; defconf: accept established,related,untracked
chain=input action=accept connection-state=established,related,untracked
log=no log-prefix=""

3 ;;; defconf: accept ICMP
chain=input action=accept protocol=icmp log=no log-prefix=""

4 ;;; defconf: accept in ipsec policy
chain=forward action=accept log=no log-prefix="" ipsec-policy=in,ipsec

ip firewall nat print detail

0 X ;;; defconf: masquerade
chain=srcnat action=masquerade out-interface-list=WAN log=no
log-prefix="" ipsec-policy=out,none

Enable the masquerade rule on your firewall, and that should do the magic...

How you are configuring firewall and openvpn? In you rules use ipsec?

Can you ping the router on 192.168.3.1? In your client openvpn configuration do you have the line redirect-gateway?

Thanks for the answers. The problem is a broken router (I bought a used one and it was a mistake). I ordered a second one (this time a new one) and I will try again. Ultimately, I did update the router software. I restarted and started working. Unfortunately, after one day the router began to hang. Now I can not connect with him at all.

As far as the settings are concerned, just like reidavidinho wrote, it was enough to add masquerade on LAN. However, the router is damaged and works very unstable (hence my problems).