Anyone else have no response from support@mikrotik.com? Maybe they are on holiday?

My first email was on the February 2nd, now it's the 11th. I sent supout.rif. Ticket # 2010020266000501.

My problem is with OpenVPN, RouterOS 4.5, x86. After a few days all VPNs fail to connect with "could not negotiate TLS in time." A reboot of the router solves this problem. I also have a strange problem with the router not passing traffic on the internet interface after a few days, which a reboot also solves. I replaced the hardware and the problem still exists.

I have a dozen routers in the field at other customer's sites, they are working fine. It seems to me that something in the configuration of this particular router is tickling a bug in MikroTik.

What is most disappointing is the lack of response from MikroTik. Even something to the effect of "We are looking into it but are busy now" would be better than silence.

I checked that ticket, there is some testing going on, I wonder why nobody told you, will make sure they do.

Thanks for your response, I also just received a response to my ticket. Sorry I had to mention it in the forum but I did try to send a few emails to support, first.

What was the solution? I have the same problem using routeros 4.5.

Ooo Ooo Oooo Me Too..... Sometimes itll go 10 days, sometimes itll only go a few hours. Have to reboot my RB1000 to fix it. Already have a case open with several supouts sent.

Well, I stopped using OpenVPN for now, just using L2TP. This didn't fix the router not responding though. I had one WAN connection that was particularly flaky and the OSPF would go up and down often. I disabled OSPF for this interface and just did static routes.

Uptime so far is 4 days - knock on wood!

Can someone from Mikrotik or someone who has figured this out please respond? I am having the exact same issue with OpenVPN and I am using 3.30 on an RB1000 and only a reboot fixes it. Previously it has worked well for quite a few months, then suddenly it stopped working. This is very frustrating.

as OpenVPN is EOL, I don't think there will be some serious fixes...

where does it say openVPN is going to be dropped?

if I understood right, v5 will not have OpenVPN. it will be replaced by some other 4-letter abbreviation =)

At least MT should build a usable L2TP/IPSec implementation before dropping OpenVPN

Nothing said that OpenVPN would be dropped (it's not yet clear), but SSTP should do everything what OpenVPN does. Imagine SSTP as "OpenVPN which works" It has all the same features and more, and is more stable than our OVPN implementation, and is also more easy to fix (just in case). Plus SSTP is integrated in Windows and has support also in Linux. For Windows users it would be easy to replace PPTP because it's configured almost the same. In RouterOS the config will be just as simple as PPTP. Yes, you will be able to select the port for the server, but obviously the default SSTP client in Windows doesn't support other ports, you would need another client, or use RouterOS for client.

Please, don't drop OpenVPN, it's currently the most usable VPN in RoS, despite some missing features. If it had those, it would be unbeatable.
SSTP also doesn't sound bad. But at the same time, it doesn't even seem to have client for XP, the still most used OS.

yep, absence of WinXP support is not good =(

Please do not drop OpenVPN. Why not add SSTP and OpenVPN? This provides more options to the network engineer. It does not create any risk, as you can turn off either service that's not being used. OpenVPN has very very configurable options and client exists for many operating systems and this is a good thing.

Mikrotik,
If I may ask, why "exactly" isn't UDP and other features supported in RouterOS OpenVPN? Please be specific, so people may understand better. I am still confused as to why UDP isn't supported?
Btw, a presenter at the Poland MUM did say OpenVPN is going to be dropped. Why was this mentioned and where did they get this information?

Anyway, please do not drop OpenVPN, try to improve it if possible (or explain why features aren't included).

mikrotik customers are crying out "please give us a full implementation of OpenVPN" and instead mikrotik may remove support entirely? seems backwards. Why go to all the trouble of making your own implementation which is not as good or complete as the open source one?

Inevitably, the answer to some question will be "you need to upgrade to version 5 as that bug is not fixed in version 4" and then your customers will need to convert all their client VPNs to SSTP, which may or may not be supported on the other end. Hangin'em out to dry.

WHO said OpenVPN is going to be removed? I didn't, MikroTik didn't.

by the way, SSTP uses TCP connections =(

WHO said OpenVPN is going to be removed? I didn't, MikroTik didn't.

chupaka said it was EOL.

WHO said OpenVPN is going to be removed? I didn't, MikroTik didn't.

Mikrotik didn't say it anything about it being removed. I just wanted to comment so others have a reference, and to hear from Mikrotik whether it's true or not.

Between: 01:09:30 - 01:09:40 is when it's mentioned that OpenVPN would be removed.
http://www.ustream.tv/recorded/5112142

Again, this is NOT Mikrotik saying this. I am just posting to confirm what myself and others may have heard.

Nothing said that OpenVPN would be dropped (it's not yet clear)

what's the meaning of it's not yet clear

well, you know, everyone thought that apple will use PowerPC forever, but still

It's all a matter of time.

Getting back on topic - Is this a bug? Nothing has been answered ...

All the new trendy VPN protocols are fine, but I would most of all like to see Mikrotik bring their IPSEC implementation up to spec.

- Virtual Tunnel Interfaces
- Automatic proxy-id creation from routes
- Multi-Point OSPF over IPSEC VTI's

All that lovely stuff that Cisco and Juniper(Netscreen) have been doing since 2001.

I would like to throw my 2 cents worth in here.

I have 100 odd sites, half of which are using pptp and half ovpn. We recently migrated some sites over to ovpn due to the sites having cheap consumer level DSL routers that would drop GRE and would have to be rebooted to bring the tunnel back up.

We are having a terrible time with OVPN like others on here. We upgraded to 4.6 recently thinking that there would be improvements, but obviously not in the slightest. It's unfortunate that MT are not improving this feature.

I hope at least SSTP will be stable.

Is there anythink new about this issue? I am still having problem using ovpn.

Yeah. Switch to SSTP because they dont plan on fixing OVPN. But SSTP has a big ass memory leak..

Yeah. Switch to SSTP because they dont plan on fixing OVPN. But SSTP has a big ass memory leak..

It doesn't, see changelog

Yeah. Switch to SSTP because they dont plan on fixing OVPN. But SSTP has a big ass memory leak..

It doesn't, see changelog

It does, see my support tickets with 5.b4,5,6,7 where 200+mb of ram disappears in sometimes under 1 day.

116 SSTP clients connected to RB1000.

I'm with same problem. Any fix?

Thanks