@zerog No, You can't. However, The amount of information that the OVPN client debugger will give you is sufficient to find out if the error is related to the server or the client. Ahhh, now I understand you :D Yes, that makes perfect sense. I keep that in mind should I need to debug a RouterOS OVPN...

@zerog

what do you mean by the legacy client

https://openvpn.net/community-downloads/

I'm aware of those, but my client itself was a hap ac2. I can't install those with RouterOS, can I?

meanwhile wireguard is working fine fine fine That was a great hint. I wasn't aware of wireguard, but it seemed promising and I just set it up and replaced OpenVPN. Works flawlessly and is significantly faster than OpenVPN. Thanks! @zerog client shows nothing suspicious You should use the OVPN lega...

UPDATE: I enabled debug logging on both client and server and while the client shows nothing suspicious (client thinks it's still connected) I see the following on the server with debug logging enabled: recvd P_DATA packet, dropping <XXX.XXX.XXX.XXX>: disconnected <bad packet received> connection es...

@own3r1138
Thanks for your reply. I'll look into this.

Chris

Hi, I do see a similar problem using OVPN UDP for a PTP connection between a Mikrotik hap ac3 and an hap ac2 running both on RouterOS 7.4. Occasionally the connection drops and while the client (hap ac2) still thinks it's connected, the server (hap ac3) does not and I see the server log being pollut...

Any updates on this?

Quick heads up: I kind of resolved this by myself by setting the Idle Timeout in the profile section to 30 seconds for the router at location A (the OVPN server). I'm not sure if this is a good solution, but I had no problems since. Maybe someone can confirm this solution?

Thanks,
Chris

Hi everyone, this is my first post, so please bear with me :) The network: network_total_sanitized.png Both MikroTik devices are on RouterOS v7.1.5 The configuration: Location A: /ppp profile add local-address=10.200.0.1 name=ovpn only-one=yes remote-address=10.200.0.2 use-encryption=yes /interface ...