I have an issue setting up OpenVPN server on the router and connecting via windows 10 client. Hear me out before saying this has already been discussed, and linking other threads. I've probably read all of them, and I've also run through this guide twice, and I'm stuck. (https://systemzone.net/mikrotik-openvpn ... ws-client/)
After setting everything up, when I try to connect the connection hangs at this point in the process:
Mon Mar 04 01:03:55 2019 MANAGEMENT: >STATE: xxxxx,TCP_CONNECT,,,,,,
Mon Mar 04 01:05:55 2019 TCP: connect to [AF_INET]x.x.x.x:1194 failed: Unknown error
The basic router configuration is working fine. I added and signed the ca, server and client certs, exported them. I followed the config template given in the link, but that didn't connect at all, so I had to tweak it a bit, but here's what I ended up with:
It's the server config where things get a bit hazy for me. Under PPP -> Interface, I have OVPN Server enabled, port 1194, Mode: ip, Netmask 24 and Certificate set to the server cert and all the right Auth options checked.
Code: Select all
dev tun proto tcp-client remote x.x.x.x 1194 ca ca.crt cert client.crt key client.key tls-client port 1194 persist-tun persist-key nobind remote-cert-tls server verb 3 mute-replay-warnings cipher AES-256-CBC auth SHA1 auth-user-pass secret auth-nocache pull
For Default Profile I have default-encryption selected, but that's when it gets complicated. I'm not sure how much gets set up when you enable the OpenVPN server and what still needs to be manually set up. Some masquerade entries get added by themselves, but what about routes? And firewall rules? There is also the option to add an "Open VPN Server Binding" interface which isn't talked about much in docs or the tutorial.
The instructions from the link say to use an ip in the same lan subnet for the vpn connections, but the settings pages seem to point to using a separate vpn address pool, which is what I'm familiar with from most OVPN setups. So I'm not quite sure where to go next and I've already had to factory reset once trying to track down the problem and locking myself out of the router settings. If anyone is willing to help, it would be much appreciated.