Openvpn server Windows Server 2016 and Mikrotik Rb951g-2hnd in offices, who can help?

Question

openvpn

The bottom line is this:
There is a VPS win serv 2016 , ovpn server
port 1194
proto tcp
dev tun0
ca "C:\\OpenVPN\\config\\ca.crt"
cert "C:\\OpenVPN\\config\\server. crt"
key "C:\\OpenVPN\\config\\server.key"
dh "C:\\OpenVPN\\config\\dh2048.pem"
#tls-server
# tls-auth "ta.key" 0
#tls -timeout 120
server 10.10.10.0 255.255.255.0
#sndbuf 0
#rcvbuf 0
#push "sndbuf 393216"
#push "rcvbuf 393216"
duplicate-cn
#push "route 192.168.0.0 255.255.255.0"
keepalive 10 120
cipher BF-CBC
#comp-lzo
max-clients 40
persist-key
persist-tun
client-to-client
status "C:\\OpenVPN\\log\\openvpn-status.log"
log "C:\\OpenVPN\\log\\openvpn.log"
log-append "C:\\OpenVPN\\ log\\openvpn.log"
verb 5
mute 10
and there are 10 mikrotik vpn clients that connect to the server, the interface goes up.
the problem is that VPS is not seen from the network behind mikrotik by vpn address,
pings from mikrotik go, but from the PC there is no
mikrotik config
/interface ovpn-client print
Flags: X - disabled, R - running
0 R name="ovpn" mac- address=FE:1F:D2:8F:6B:29 max-mtu=1500
connect-to=######## port=1194 mode=ip user="none" password="none"
profile=default certificate=client14.crt_0 auth=sha1 cipher=blowfish128
add-default-route=no
while testing, there are no prohibiting rules in the firewall, everything is allowed, I assume that you need a NAT rule or something like that I would be
very grateful for a hint or any help for tired already!

Answer 1

Of course you need nat on the tunnel interface.

Answer 2

Need route on Mikrotik:
Dst-address: local vpn address of server
Gateway: ppp-interface

Answer 3

Found a plug /ip firewall filter add action=accept chain=input comment="OpenVPN" disabled=no dst-port=1194 protocol=tcp and /ip firewall nat add chain=srcnat out-interface=openvpn interface action=
masquerade