That's weird. The idea behind connecting from LAN was to do a test where load balacing does not influence anything. All your connection marking rules have either in-interface=WANX_PPPOEOUT or dst-address-type=!local, so none of them will touch any connection from LAN to any of router's addresses. A...

What client is that? It doesn't look like the usual one (from https://openvpn.net/community-downloads/). I'm not saying that yours can't work, just that I don't know it. One more thing you can try is to connect from LAN, that would rule out whole load balancing as the problem. Hi Sob The client is ...

I'd try different client (Windows, Linux), to see if it works or at least has more useful error messages. This is what I get with a Windows client: [Feb 18, 2022, 22:33:04] OpenVPN core 3.git::d3f8b18b win x86_64 64-bit built on Dec 8 2021 12:04:20 ⏎[Feb 18, 2022, 22:33:04] Frame=512/2048/512 mssfi...

Ok Sob. I will try with Windows client & share my observations soon.

Cheers.

On second look, what I wrote is correct, but there's also some other problem, when it doesn't connect at all. But I don't see what it is. Do you see this rule accepting any packets (after you removed that dstnat rule)? /ip firewall filter add action=accept chain=input comment="Allow OpenVPN Co...

With dual WAN you need to ensure that inbound packages to the routers will have their responses sent out through the same interface. - Inbound connections on the WANs that are not connection marked need to be tagged (in magle/preroute). One rule per WAN. - On the output flow (mangle/output), if a c...

Thanks for your response Sob. Yes, the dst-nat rule was out of desperation / frustration :( I tried adding the network to not_in_internet_list or setting up route rule but still the response is same. Server poll timeout still persists. Would you like to have some other logs or something for further ...

Hi there! I have a dual WAN setup with PCC & NTH. I wanted to add Open VPN Server & have completed configuration for the same. OpenVPN client is not able to connect. I can see that packets are flowing till the dst-nat rule but going nowhere from there or somewhere that I am not able to under...

Thanks a ton @anav for taking out the time & simplifying the rules for crystal clear understanding. After dealing with the frustration & mounting pressure from my family for a stable internet connection, I caved in & reset my config :| I followed this excellent guide from Daryll Swer &am...

Hello everyone Absolute newbie here in Mikrotik world. Got my RB750GR3 about 3 days ago. Loving the fact that this platform is not limited by licenses or commercial commitment. The fact that you can learn & experiment on basic network devices is really liberating. Unfortunately, I am not a netwo...