How to set up OpenVPN on mikrotik correctly?

Question

openvpn

Hello! Created an OpenVPN server on Mikrotik. I connect from a Windows client, sees the router, but does not see hosts on the Mikrotik local network. How to win? Where to look? Thank you.

Answer 1

Show the routing table on the PC after raising the VPN. What are the IP addresses of the hosts on the local network?
netstat -nr
You need to put VPN clients in another pool, for example 10.10.30.0/24.
Mikrotik will forward packets between different networks.
The main thing here is to follow the rules
- both PCs should have a microtic as the main router, look at netstat -nr
for local it is
0.0.0.0 0.0.0.0 10.10.20.1
for VPN
0.0.0.0 0.0.0.0 10.20.30.1
OR
It is also not necessary to drive everything traffic through the VPN, one route to the local network is enough on the VPN client.
10.10.20.0 255.255.255.0 10.20.30.1
- there should be a rule on Mikrotik allowing traffic between these networks.
- there should be no masquerading between these networks
. You seem to have a masquerade set up correctly, but did not find out-interface-list=WAN in your configuration, which interfaces it includes.
/ip firewall nat
add action=masquerade chain=srcnat comment="LAN to WAN" ipsec-policy=out,none \
out-interface-list=WAN