How can a client connect to an OpenVPN server behind a router?

Question

openvpn

Good day, dear experts.
I'll go straight to the point
. When a user connects to a deployed OpenVPN server in the Open VPN Community application, it displays the following information:

Sat Mar 21 11:25:21 2020 DEPRECATED OPTION: --max-routes option ignored.The number of routes is unlimited as of OpenVPN 2.4. This option will be removed in a future version, please remove it from your configuration.
Sat Mar 21 11:25:21 2020 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Sat Mar 21 11:25:21 2020 Windows version 6.2 (Windows 8 or greater) 64bit
Sat Mar 21 11:25:21 2020 library versions: OpenSSL 1.1.0l  10 Sep 2019, LZO 2.10
Sat Mar 21 11:25:26 2020 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 21 11:25:26 2020 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 21 11:25:26 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]**2.**1.**6.**3:1194
Sat Mar 21 11:25:26 2020 UDP link local: (not bound)
Sat Mar 21 11:25:26 2020 UDP link remote: [AF_INET]**2.**1.**6.**3:1194
Sat Mar 21 11:25:30 2020 Server poll timeout, restarting
Sat Mar 21 11:25:30 2020 SIGUSR1[soft,server_poll] received, process restarting
Sat Mar 21 11:25:30 2020 Outgoing Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 21 11:25:30 2020 Incoming Control Channel Authentication: Using 160 bit message hash 'SHA1' for HMAC authentication
Sat Mar 21 11:25:30 2020 TCP/UDP: Preserving recently used remote address: [AF_INET]**2.**1.**6.**3:1194
Sat Mar 21 11:25:30 2020 UDP link local: (not bound)
Sat Mar 21 11:25:30 2020 UDP link remote: [AF_INET]**2.**1.**6.**3:1194

and every 5 seconds the last 7 lines are added
Interaction looks like this
[ Client ]-----{Internet}-----(Mikrotik)---[ OpenVPN_srv ]
UDP(1194) port "seems to be" forwarded to openvpn server.
Since on the client device, when connecting, an authorization field opens (you must enter your login and password).
Passes authorization but connection transits. pritunl was
taken as an OpenVPN server . When we tested pritunl and deployed the server inside the local network, everything was on fire (working). As soon as they switched to the combat network, everything fell apart . How to fix the situation?


And what actions should be taken in general to configure the equipment (both the router and OpenVPN) for correct interaction.
And then I searched the Internet, and did not find a similar problem.
Help please (it is possible with a link to someone else's similar question).

PS. how should pritunl's open source solution be used?
Or are there better solutions?
(Do not offer OpenVPN/easy-rsa until you have time to automate the process of generating/signing/issuing/accounting for certificates. In the future, it will be so)