I'm fairly new with Mikrotik and I've been having issues when configuring a OpenVPN server on my Mikrotik Router. My router is the model RB4011.
Here's the deal, when I always try to connect to the VPN I get this log:
On the attachment you can see the log on my router.2021-09-22 12:11:05 TCP connection established with [AF_INET][WAN of my Router]
2021-09-22 12:11:05 TCP_CLIENT link local: (not bound)
2021-09-22 12:11:05 TCP_CLIENT link remote: [AF_INET][WAN of my Router]
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,WAIT,,,,,,
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,AUTH,,,,,,
2021-09-22 12:11:05 TLS: Initial packet from [AF_INET][WAN of my Router], sid=b1e4a18b 1a34197c
2021-09-22 12:11:05 VERIFY OK: depth=1, CN=ca
2021-09-22 12:11:05 VERIFY KU OK
2021-09-22 12:11:05 Validating certificate extended key usage
2021-09-22 12:11:05 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
2021-09-22 12:11:05 VERIFY EKU OK
2021-09-22 12:11:05 VERIFY OK: depth=0, CN=server
2021-09-22 12:11:05 Connection reset, restarting [0]
2021-09-22 12:11:05 SIGUSR1[soft,connection-reset] received, process restarting
2021-09-22 12:11:05 MANAGEMENT: >STATE:1632305465,RECONNECTING,connection-reset,,,,,
2021-09-22 12:11:05 Restart pause, 80 second(s)
2021-09-22 12:12:25 MANAGEMENT: >STATE:1632305545,RESOLVE,,,,,,
2021-09-22 12:12:25 TCP/UDP: Preserving recently used remote address: [AF_INET][WAN of my Router]
2021-09-22 12:12:25 Socket Buffers: R=[65536->65536] S=[64512->64512]
2021-09-22 12:12:25 Attempting to establish TCP connection with [AF_INET][WAN of my Router] [nonblock]
I've been trying to have OpenVPN working for more than a week, I've retried the process of configuring openVPN over and over with no luck. Here's what I've done:
- I created 3 certificates, the CA, the one for the server and a client, the three of them with the recommended configuration that's on the wiki
- I exported the CA and the client certificate with a passphrase
- I configured the server to require a client certificate, it uses the server certificate and it uses sha1/aes256
- I created a PPP profile with a local address(192.168.74.1) and a remote address(IP pool, 192.168.74.2-192.168.74.250)
- I created a PPP secret for the user with the certificate I created previously, this secret uses the PPP profile I created and it uses the ovpn service
- I configured the default ovpn config file on the client-side with the options mentioned in the wiki, it also uses a secret.cfg
Thank you in advance!
