Hi everyone,
I have already used OpenVPN with Mikrotik products for many projects, but all with version 6.XX
Given the release of V 7.XX I decided to do some tests on a simple application for the interconnection of two networks, however I'm having many problems with packet delivery.
Situation
# Router A
LAN 192.168.16.0/24
WAN XXX.XXX.XXX.XXX
OpenVPN server (TCP Protocol, IP Mode) 172.16.17.1 (Pool Client /26)
# Router B
LAN 192.168.0.0/24
YYY.YYY.YYY.YYY
Open VPN client (Client IP 172.16.17.5)
The goal of my setup is to make devices on the 192.168.16.0 network reachable from hosts on the 192.168.0.0 network through the VPN tunnel.
To do this I configured these static routes:
# Router A --> dst-add=192.168.0.0/24 gateway=172.16.17.5
# Router B --> dst-add=192.168.16.0/24 gateway=172.16.17.1
the anomalous thing that's happening to me and that makes me think it's not a route problem but something else is that if I do a simple test with ICMP packets (I cross-ping devices on different LANs) it works perfectly. Instead if I go to open WEB interfaces they load in part without ever completing the connection.
I checked the various IPs src and dst in the two "connection-traking" and everything seems to come back ... but it doesn't work.
Am I missing some additional configuration? Has a similar thing happened to anyone?
Thank you
Re: OS 7.10.1 OpenVPN Site to Site Problem
Probably an MTU issue. Especially if web pages are HTTPS.
Add this in the top of your mangle rules
Andy
Add this in the top of your mangle rules
Code: Select all
/ip firewall mangle
add action=change-mss chain=forward new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=syn comment="Clamp MSS to PMTU for Outgoing packets"
add action=change-mss chain=output new-mss=clamp-to-pmtu passthrough=yes protocol=tcp tcp-flags=synWho is online
Users browsing this forum: No registered users and 5 guests