Site to site Openvpn between a Pfsense Server and a Mikrotik

jlms77

Hi, i've been trying the last days to get working a site to site Openvpn between a Pfsense Server and a Mikrotik Router but have no luck, the tunnel is working ok, the firewalls can ping each other over the tunnel network, the Pfsense can ping the internal network on site with the Mikrotik and the Mikrotik can ping the internal network on the Pfsense site. The big issue is that the clients on both sides can`t access the services on the remote LANS, here is the setup:

Pfsense OpenVpn config:

dev ovpns2
verb 1
dev-type tun
tun-ipv6
dev-node /dev/tun2
writepid /var/run/openvpn_server2.pid
#user nobody
#group nobody
script-security 3
daemon
keepalive 10 60
ping-timer-rem
persist-tun
persist-key
proto tcp-server
cipher AES-128-CBC
auth SHA1
up /usr/local/sbin/ovpn-linkup
down /usr/local/sbin/ovpn-linkdown
local x.x.x.x
tls-server
server 10.0.0.0 255.255.255.0
client-config-dir /var/etc/openvpn-csc
ifconfig 10.0.0.1 10.0.0.2
tls-verify "/usr/local/sbin/ovpn_auth_verify tls 'x.x.x.x' 1 "
lport 1195
management /var/etc/openvpn/server2.sock unix
max-clients 1
push "route 192.168.1.1 255.255.255.0"
route 192.168.0.0 255.255.255.0
ca /var/etc/openvpn/server2.ca
cert /var/etc/openvpn/server2.cert
key /var/etc/openvpn/server2.key
dh /etc/dh-parameters.1024

Mikrotik Client Override on Pfsense Server:

ifconfig-push 10.0.0.2 10.0.0.1
push "route 192.168.1.0 255.255.255.0 10.0.0.1"
iroute 192.168.0.0 255.255.255.0

Routing Table on Pfsense (Just the relevant entries)

Destination        Gateway            Flags      Netif Expire
default            x.x.x.x UGS         em2
10.0.0.0           10.0.0.2           UGS      ovpns2
10.0.0.1           link#13            UHS         lo0
10.0.0.2           link#13            UH       ovpns2
10.0.8.0           10.0.8.1           UGS      ovpns1
10.0.8.1           link#12            UHS         lo0
10.0.8.2           link#12            UH       ovpns1
localhost          link#10            UH          lo0
192.168.0.0        10.0.0.2           UGS      ovpns2
192.168.1.0        link#2             U           em0

Mikrotik OpenVpn Config Site B:

/interface ovpn-client
add add-default-route=no auth=sha1 certificate=cert_18 cipher=aes128 \
    connect-to=x.x.x.x disabled=no mac-address=xx:xx:xx:xx:xx:xx \
    max-mtu=1500 mode=ip name=ovpn-out1 password=xxxxxx port=1195 profile=\
    openvpnprofile user=xxxxxxxx

Mikrotik Routing Table

Any help will be appreciated.

Traffic

Your logs will point out at least one error .. :ugeek:

jlms77

Traffic wroteYour logs will point out at least one error .. :ugeek:

Sorry, i forgot to post the log, i´ve restarted the openvpn daemon and the log stays like that even when doing pings to test the setup (x.x.x.x is the Mikrotik wan IP and y.y.y.y is the pfsense wan ip address):

Mar 8 18:29:54	openvpn[33972]: x.x.x.x/x.x.x.x:44682 send_push_reply(): safe_cap=940
Mar 8 18:29:54	openvpn[33972]: x.x.x.x:44682 [x.x.x.x] Peer Connection Initiated with [AF_INET]x.x.x.x:44682
Mar 8 18:29:45	openvpn[33972]: TCP connection established with [AF_INET]x.x.x.x:44682
Mar 8 18:29:43	openvpn[33972]: Initialization Sequence Completed
Mar 8 18:29:43	openvpn[33972]: TCPv4_SERVER link remote: [undef]
Mar 8 18:29:43	openvpn[33972]: TCPv4_SERVER link local (bound): [AF_INET]y.y.y.y:1195
Mar 8 18:29:43	openvpn[33972]: Listening for incoming TCP connection on [AF_INET]y.y.y.y:1195
Mar 8 18:29:43	openvpn[33972]: /usr/local/sbin/ovpn-linkup ovpns2 1500 1559 10.0.0.1 10.0.0.2 init
Mar 8 18:29:43	openvpn[33972]: /sbin/ifconfig ovpns2 10.0.0.1 10.0.0.2 mtu 1500 netmask 255.255.255.255 up
Mar 8 18:29:43	openvpn[33972]: do_ifconfig, tt->ipv6=1, tt->did_ifconfig_ipv6_setup=0
Mar 8 18:29:43	openvpn[33972]: TUN/TAP device /dev/tun2 opened
Mar 8 18:29:43	openvpn[33972]: TUN/TAP device ovpns2 exists previously, keep at program end
Mar 8 18:29:43	openvpn[33972]: NOTE: the current --script-security setting may allow this configuration to call user-defined scripts
Mar 8 18:29:43	openvpn[33697]: library versions: OpenSSL 1.0.1l-freebsd 15 Jan 2015, LZO 2.09
Mar 8 18:29:43	openvpn[33697]: OpenVPN 2.3.8 i386-portbld-freebsd10.1 [SSL (OpenSSL)] [LZO] [MH] [IPv6] built on Aug 21 2015
Mar 8 18:29:43	openvpn[56378]: SIGTERM[hard,] received, process exiting

Traffic

Check your client log ....

datazca

Hi, I'm the mikrotik administrator in this prohect with jlms77

Here is the log of mikrotik


15:20:48 ovpn,info ovpn-out1: terminating... - administrator request 
15:20:49 route,debug,event Interface change 
15:20:49 route,debug,event     interface=ovpn-out1 
15:20:49 route,debug,event     status=DOWN 
15:20:49 route,debug,event     mtu=1500 
15:20:49 route,debug,event Interface change 
15:20:49 route,debug,event     interface=ovpn-out1 
15:20:49 route,debug,event     status=DOWN 
15:20:49 route,debug,event     mtu=1500 
15:20:49 route,debug,event Remove interface ovpn-out1 
15:20:50 route,debug,calc Begin calculation 
15:20:50 ovpn,info ovpn-out1: disabled 
15:20:52 route,debug,event Removed route 
15:20:52 route,debug,event     state=ACTIVE 
15:20:52 route,debug,event     dst-prefix=10.0.0.1/32 
15:20:52 route,debug,event     attributes 
15:20:52 route,debug,event         protocol=CONNECT 
15:20:52 route,debug,event         distance=0 
15:20:52 route,debug,event         scope=10 
15:20:52 route,debug,event         target-scope=0 
15:20:52 route,debug,event         connected-net= address=10.0.0.2/32 interface=ov
pn-out1 
15:20:52 route,debug,event         routing-mark=main 
15:20:52 route,debug,event         table=main 
15:20:52 route,debug,event         origin-type=CONNECTED 
15:20:52 route,debug,calc Tag next hop for recalculation 
15:20:52 route,debug,calc     address=10.0.0.1 
15:20:52 route,debug,event Updated route 
15:20:52 route,debug,event     previous-state=CANDIDATE 
15:20:52 route,debug,event     state=CANDIDATE 
15:20:52 route,debug,event     dst-address=192.168.0.0/24 
15:20:52 route,debug,event     attributes 
15:20:52 route,debug,event         protocol=STATIC 
15:20:52 route,debug,event         distance=1 
15:20:52 route,debug,event         scope=30 
15:20:52 route,debug,event         target-scope=10 
15:20:52 route,debug,event         preferred-source=10.0.0.2 
15:20:52 route,debug,event         next-hop= address=10.0.0.1 
15:20:52 route,debug,event         comment=Dany prueba 
15:20:52 route,debug,event         origin-type=STATIC 
15:20:52 route,debug,event Updated route 
15:20:52 route,debug,event     previous-state=CANDIDATE 
15:20:52 route,debug,event     state=CANDIDATE 
15:20:52 route,debug,event     dst-address=192.168.0.0/24 
15:20:52 route,debug,event     attributes 
15:20:52 route,debug,event         protocol=STATIC 
15:20:52 route,debug,event         distance=1 
15:20:52 route,debug,event         scope=30 
15:20:52 route,debug,event         target-scope=10 
15:20:52 route,debug,event         preferred-source=10.0.0.2 
15:20:52 route,debug,event         next-hop= address=10.0.0.1 
15:20:52 route,debug,event         comment= 
15:20:52 route,debug,event         origin-type=STATIC 
15:20:52 route,debug,calc Tag next hop for recalculation 
15:20:52 route,debug,calc     address=10.0.0.1 
15:20:52 route,debug,calc Select route 
15:20:52 route,debug,calc     dst-address=192.168.0.0/24 
15:20:52 route,debug,calc     attributes 
15:20:52 route,debug,calc         protocol=CONNECT 
15:20:52 route,debug,calc         distance=0 
15:20:52 route,debug,calc         scope=10 
15:20:52 route,debug,calc         target-scope=0 
15:20:52 route,debug,calc         connected-net= address=192.168.0.1/24 interface=
LAN1 
15:20:52 route,debug,calc         routing-mark=main 
15:20:52 route,debug,calc         table=main 
15:20:52 route,debug,calc         origin-type=CONNECTED 
15:20:52 route,debug,calc End calculation 
15:20:52 route,debug Begin redistribution 
15:20:52 route,debug Accept update 192.168.0.0/24 
15:20:52 route,debug Accept withdraw 192.168.1.0/24 
15:20:52 route,debug Accept withdraw 10.0.0.1/32 
15:20:52 route,debug Commit prefix 192.168.1.0/24 
15:20:52 route,debug Commit prefix 10.0.0.1/32 
15:20:52 route,debug Commit prefix 192.168.0.0/24 
15:20:52 route,debug End redistribution 
15:20:52 route,debug,calc Begin calculation 
15:20:52 route,debug,event Address removed 
15:20:52 route,debug,event     network=10.0.0.1/32 
15:20:52 route,debug,event Removed route 
15:20:52 route,debug,event     state=CANDIDATE 
15:20:52 route,debug,event     dst-prefix=192.168.1.0/24 
15:20:52 route,debug,event     attributes 
15:20:52 route,debug,event         protocol=DYNAMIC 
15:20:52 route,debug,event         distance=1 
15:20:52 route,debug,event         scope=30 
15:20:52 route,debug,event         target-scope=10 
15:20:52 route,debug,event         next-hop= address=10.0.0.1 
15:20:52 route,debug,event         origin-type=DYNAMIC 
15:20:52 route,debug,calc End calculation 
15:20:52 route,debug Begin redistribution 
15:20:52 route,debug Accept  192.168.1.0/24 
15:20:52 route,debug Commit prefix 192.168.1.0/24 
15:20:52 route,debug End redistribution 
15:20:52 route,debug,calc Begin calculation 
15:20:52 route,debug,event Removed route 
15:20:52 route,debug,event     state=CANDIDATE 
15:20:52 route,debug,event     dst-prefix=192.168.1.0/24 
15:20:52 route,debug,event     attributes 
15:20:52 route,debug,event         protocol=DYNAMIC 
15:20:52 route,debug,event         distance=1 
15:20:52 route,debug,event         scope=30 
15:20:52 route,debug,event         target-scope=10 
15:20:52 route,debug,event         next-hop= address=10.0.0.1 
15:20:52 route,debug,event         origin-type=DYNAMIC 
15:20:52 route,debug,calc End calculation 
15:20:52 route,debug Begin redistribution 
15:20:52 route,debug Accept  192.168.1.0/24 
15:20:52 route,debug Commit prefix 192.168.1.0/24 
15:20:52 route,debug End redistribution 
15:20:52 system,info device changed by admin 
15:20:58 ovpn,info ovpn-out1: initializing... 
15:20:58 ovpn,info ovpn-out1: connecting... 
15:20:59 system,info device changed by admin 
15:21:07 ovpn,info ovpn-out1: using encoding - AES-128-CBC/SHA1 
15:21:08 ovpn,info ovpn-out1: connected 
15:21:10 route,debug,calc Begin calculation 
15:21:11 route,debug,event Added candidate route 
15:21:11 route,debug,event     dst-prefix=192.168.1.0/24 
15:21:11 route,debug,event     attributes 
15:21:11 route,debug,event         protocol=DYNAMIC 
15:21:11 route,debug,event         distance=1 
15:21:11 route,debug,event         scope=30 
15:21:11 route,debug,event         target-scope=10 
15:21:11 route,debug,event         next-hop= address=10.0.0.1 
15:21:11 route,debug,event         origin-type=DYNAMIC 
15:21:11 route,debug,event Added candidate route 
15:21:11 route,debug,event     dst-prefix=192.168.1.0/24 
15:21:11 route,debug,event     attributes 
15:21:11 route,debug,event         protocol=DYNAMIC 
15:21:11 route,debug,event         distance=1 
15:21:11 route,debug,event         scope=30 
15:21:11 route,debug,event         target-scope=10 
15:21:11 route,debug,event         next-hop= address=10.0.0.1 
15:21:11 route,debug,event         origin-type=DYNAMIC 
15:21:11 route,debug,event Interface change 
15:21:11 route,debug,event     interface=ovpn-out1 
15:21:11 route,debug,event     status=UP,RUNNING 
15:21:11 route,debug,event     mtu=1500 
15:21:11 route,debug,calc End calculation 
15:21:11 route,debug Begin redistribution 
15:21:11 route,debug Accept  192.168.1.0/24 
15:21:11 route,debug,event Interface change 
15:21:11 route,debug,event     interface=ovpn-out1 
15:21:11 route,debug,event     status=UP,RUNNING 
15:21:11 route,debug,event     mtu=1500 
15:21:11 route,debug Commit prefix 192.168.1.0/24 
15:21:11 route,debug End redistribution 
15:21:11 route,debug,calc Begin calculation 
15:21:11 route,debug,event Link up 
15:21:11 route,debug,event     interface=ovpn-out1 
15:21:11 route,debug,event Update 
15:21:11 route,debug,event     interface=ovpn-out1 
15:21:11 route,debug,calc End calculation 
15:21:12 route,debug,calc Begin calculation 
15:21:12 route,debug,event Address added or changed 
15:21:12 route,debug,event     local=10.0.0.2 
15:21:12 route,debug,event     network=10.0.0.1/32 
15:21:12 route,debug,event     interface=ovpn-out1 
15:21:12 route,debug,event Added candidate route 
15:21:12 route,debug,event     dst-prefix=10.0.0.1/32 
15:21:12 route,debug,event     attributes 
15:21:12 route,debug,event         protocol=CONNECT 
15:21:12 route,debug,event         distance=0 
15:21:12 route,debug,event         scope=10 
15:21:12 route,debug,event         target-scope=0 
15:21:12 route,debug,event         connected-net= address=10.0.0.2/32 interface=ov
pn-out1 
15:21:12 route,debug,event         routing-mark=main 
15:21:12 route,debug,event         table=main 
15:21:12 route,debug,event         origin-type=CONNECTED 
15:21:12 route,debug,event Updated route 
15:21:12 route,debug,event     previous-state=CANDIDATE 
15:21:12 route,debug,event     state=CANDIDATE 
15:21:12 route,debug,event     dst-address=192.168.0.0/24 
15:21:12 route,debug,event     attributes 
15:21:12 route,debug,event         protocol=STATIC 
15:21:12 route,debug,event         distance=1 
15:21:12 route,debug,event         scope=30 
15:21:12 route,debug,event         target-scope=10 
15:21:12 route,debug,event         preferred-source=10.0.0.2 
15:21:12 route,debug,event         next-hop= address=10.0.0.1 
15:21:12 route,debug,event         comment=Dany prueba 
15:21:12 route,debug,event         origin-type=STATIC 
15:21:12 route,debug,event Updated route 
15:21:12 route,debug,event     previous-state=CANDIDATE 
15:21:12 route,debug,event     state=CANDIDATE 
15:21:12 route,debug,event     dst-address=192.168.0.0/24 
15:21:12 route,debug,event     attributes 
15:21:12 route,debug,event         protocol=STATIC 
15:21:12 route,debug,event         distance=1 
15:21:12 route,debug,event         scope=30 
15:21:12 route,debug,event         target-scope=10 
15:21:12 route,debug,event         preferred-source=10.0.0.2 
15:21:12 route,debug,event         next-hop= address=10.0.0.1 
15:21:12 route,debug,event         comment= 
15:21:12 route,debug,event         origin-type=STATIC 
15:21:12 route,debug,calc Tag next hop for recalculation 
15:21:12 route,debug,calc     address=10.0.0.1 
15:21:12 route,debug,calc Select route 
15:21:12 route,debug,calc     dst-address=192.168.0.0/24 
15:21:12 route,debug,calc     attributes 
15:21:12 route,debug,calc         protocol=CONNECT 
15:21:12 route,debug,calc         distance=0 
15:21:12 route,debug,calc         scope=10 
15:21:12 route,debug,calc         target-scope=0 
15:21:12 route,debug,calc         connected-net= address=192.168.0.1/24 interface=
LAN1 
15:21:12 route,debug,calc         routing-mark=main 
15:21:12 route,debug,calc         table=main 
15:21:12 route,debug,calc         origin-type=CONNECTED 
15:21:12 route,debug,calc Select route 
15:21:12 route,debug,calc     dst-address=10.0.0.1/32 
15:21:12 route,debug,calc     attributes 
15:21:12 route,debug,calc         protocol=CONNECT 
15:21:12 route,debug,calc         distance=0 
15:21:12 route,debug,calc         scope=10 
15:21:12 route,debug,calc         target-scope=0 
15:21:12 route,debug,calc         connected-net= address=10.0.0.2/32 interface=ovp
n-out1 
15:21:12 route,debug,calc         routing-mark=main 
15:21:12 route,debug,calc         table=main 
15:21:12 route,debug,calc         origin-type=CONNECTED 
15:21:12 route,debug,calc Next hop resolved 
15:21:12 route,debug,calc     address=10.0.0.1 
15:21:12 route,debug,calc     route=10.0.0.1/32 
15:21:12 route,debug,calc     immediate-address=10.0.0.1 
15:21:12 route,debug,calc     interface=ovpn-out1 
15:21:12 route,debug,calc Select route 
15:21:12 route,debug,calc     dst-address=192.168.1.0/24 
15:21:12 route,debug,calc     attributes 
15:21:12 route,debug,calc         protocol=DYNAMIC 
15:21:12 route,debug,calc         distance=1 
15:21:12 route,debug,calc         scope=30 
15:21:12 route,debug,calc         target-scope=10 
15:21:12 route,debug,calc         next-hop= address=10.0.0.1 
15:21:12 route,debug,calc         origin-type=DYNAMIC 
15:21:12 route,debug,calc End calculation 
15:21:12 route,debug Begin redistribution 
15:21:12 route,debug Accept update 192.168.0.0/24 
15:21:12 route,debug Accept add 10.0.0.1/32 
15:21:12 route,debug Accept add 192.168.1.0/24 
15:21:12 route,debug Commit prefix 192.168.1.0/24 
15:21:12 route,debug Commit prefix 192.168.0.0/24 
15:21:12 route,debug Commit prefix 10.0.0.1/32 
15:21:12 route,debug End redistribution

Any help will be appreciated.

Traffic

See this HOWTO:
HOWTO: Expanding the scope of the VPN to include additional machines

Double check your subnets & --iroutes .. 192.168.0.1/24 is invalid.

datazca

Hi,
I just checked the logs of the mikrotik to see if something changed, bit I think is almost the same result

19:10:07 ovpn,info ovpn-out1: connecting... 
19:10:13 ovpn,info ovpn-out1: using encoding - AES-128-CBC/SHA1 
19:10:14 system,info,account user admin logged in from 192.168.0.113 via telnet 
19:10:14 ovpn,info ovpn-out1: connected 
19:10:16 route,debug,calc Begin calculation 
19:10:16 route,debug,event Added candidate route 
19:10:16 route,debug,event     dst-prefix=192.168.1.0/24 
19:10:17 route,debug,event     attributes 
19:10:17 route,debug,event         protocol=DYNAMIC 
19:10:17 route,debug,event         distance=1 
19:10:17 route,debug,event         scope=30 
19:10:17 route,debug,event         target-scope=10 
19:10:17 route,debug,event         next-hop= address=10.0.0.1 
19:10:17 route,debug,event         origin-type=DYNAMIC 
19:10:17 route,debug,event Added candidate route 
19:10:17 route,debug,event     dst-prefix=192.168.1.0/24 
19:10:17 route,debug,event     attributes 
19:10:17 route,debug,event         protocol=DYNAMIC 
19:10:17 route,debug,event         distance=1 
19:10:17 route,debug,event         scope=30 
19:10:17 route,debug,event         target-scope=10 
19:10:17 route,debug,event         next-hop= address=10.0.0.1 
19:10:17 route,debug,event         origin-type=DYNAMIC 
19:10:17 route,debug,event Added candidate route 
19:10:17 route,debug,event     dst-prefix=192.168.1.0/24 
19:10:17 route,debug,event     attributes 
19:10:17 route,debug,event         protocol=DYNAMIC 
19:10:17 route,debug,event         distance=1 
19:10:17 route,debug,event         scope=30 
19:10:17 route,debug,event         target-scope=10 
19:10:17 route,debug,event         next-hop= address=10.0.0.1 
19:10:17 route,debug,event         origin-type=DYNAMIC 
19:10:17 route,debug,calc End calculation 
19:10:17 route,debug Begin redistribution 
19:10:17 route,debug Accept  192.168.1.0/24 
19:10:17 route,debug Commit prefix 192.168.1.0/24 
19:10:17 route,debug End redistribution 
19:10:17 route,debug,event Interface change 
19:10:17 route,debug,event     interface=ovpn-out1 
19:10:17 route,debug,event     status=UP,RUNNING 
19:10:17 route,debug,event     mtu=1500 
19:10:17 route,debug,event Interface change 
19:10:17 route,debug,event     interface=ovpn-out1 
19:10:17 route,debug,event     status=UP,RUNNING 
19:10:17 route,debug,event     mtu=1500 
19:10:17 route,debug,calc Begin calculation 
19:10:17 route,debug,event Link up 
19:10:17 route,debug,event     interface=ovpn-out1 
19:10:17 route,debug,event Update 
19:10:17 route,debug,event     interface=ovpn-out1 
19:10:17 route,debug,calc End calculation 
19:10:18 route,debug,calc Begin calculation 
19:10:18 route,debug,event Address added or changed 
19:10:18 route,debug,event     local=10.0.0.2 
19:10:18 route,debug,event     network=10.0.0.1/32 
19:10:18 route,debug,event     interface=ovpn-out1 
19:10:18 route,debug,event Added candidate route 
19:10:18 route,debug,event     dst-prefix=10.0.0.1/32 
19:10:18 route,debug,event     attributes 
19:10:18 route,debug,event         protocol=CONNECT 
19:10:18 route,debug,event         distance=0 
19:10:18 route,debug,event         scope=10 
19:10:18 route,debug,event         target-scope=0 
19:10:18 route,debug,event         connected-net= address=10.0.0.2/32 interface=ov
pn-out1 
19:10:18 route,debug,event         routing-mark=main 
19:10:18 route,debug,event         table=main 
19:10:18 route,debug,event         origin-type=CONNECTED 
19:10:18 route,debug,event Updated route 
19:10:18 route,debug,event     previous-state=CANDIDATE 
19:10:18 route,debug,event     state=CANDIDATE 
19:10:19 route,debug,event     dst-address=192.168.0.0/24 
19:10:19 route,debug,event     attributes 
19:10:19 route,debug,event         protocol=STATIC 
19:10:19 route,debug,event         distance=1 
19:10:19 route,debug,event         scope=30 
19:10:19 route,debug,event         target-scope=10 
19:10:19 route,debug,event         preferred-source=10.0.0.2 
19:10:19 route,debug,event         next-hop= address=10.0.0.1 
19:10:19 route,debug,event         comment=Dany prueba 
19:10:19 route,debug,event         origin-type=STATIC 
19:10:19 route,debug,event Updated route 
19:10:19 route,debug,event     previous-state=CANDIDATE 
19:10:19 route,debug,event     state=CANDIDATE 
19:10:19 route,debug,event     dst-address=192.168.0.0/24 
19:10:19 route,debug,event     attributes 
19:10:19 route,debug,event         protocol=STATIC 
19:10:19 route,debug,event         distance=1 
19:10:19 route,debug,event         scope=30 
19:10:19 route,debug,event         target-scope=10 
19:10:19 route,debug,event         preferred-source=10.0.0.2 
19:10:19 route,debug,event         next-hop= address=10.0.0.1 
19:10:19 route,debug,event         comment= 
19:10:19 route,debug,event         origin-type=STATIC 
19:10:19 route,debug,calc Tag next hop for recalculation 
19:10:19 route,debug,calc     address=10.0.0.1 
19:10:19 route,debug,calc Select route 
19:10:19 route,debug,calc     dst-address=192.168.0.0/24 
19:10:19 route,debug,calc     attributes 
19:10:19 route,debug,calc         protocol=CONNECT 
19:10:19 route,debug,calc         distance=0 
19:10:19 route,debug,calc         scope=10 
19:10:19 route,debug,calc         target-scope=0 
19:10:19 route,debug,calc         connected-net= address=192.168.0.1/24 interface=
LAN1 
19:10:19 route,debug,calc         routing-mark=main 
19:10:19 route,debug,calc         table=main 
19:10:19 route,debug,calc         origin-type=CONNECTED 
19:10:19 route,debug,calc Select route 
19:10:19 route,debug,calc     dst-address=10.0.0.1/32 
19:10:19 route,debug,calc     attributes 
19:10:19 route,debug,calc         protocol=CONNECT 
19:10:19 route,debug,calc         distance=0 
19:10:19 route,debug,calc         scope=10 
19:10:19 route,debug,calc         target-scope=0 
19:10:19 route,debug,calc         connected-net= address=10.0.0.2/32 interface=ovp
n-out1 
19:10:19 route,debug,calc         routing-mark=main 
19:10:19 route,debug,calc         table=main 
19:10:19 route,debug,calc         origin-type=CONNECTED 
19:10:19 route,debug,calc Next hop resolved 
19:10:19 route,debug,calc     address=10.0.0.1 
19:10:19 route,debug,calc     route=10.0.0.1/32 
19:10:19 route,debug,calc     immediate-address=10.0.0.1 
19:10:19 route,debug,calc     interface=ovpn-out1 
19:10:19 route,debug,calc Select route 
19:10:19 route,debug,calc     dst-address=192.168.1.0/24 
19:10:19 route,debug,calc     attributes 
19:10:19 route,debug,calc         protocol=DYNAMIC 
19:10:19 route,debug,calc         distance=1 
19:10:19 route,debug,calc         scope=30 
19:10:19 route,debug,calc         target-scope=10 
19:10:19 route,debug,calc         next-hop= address=10.0
19:10:19 route,debug,calc         origin-type=DYNAMIC 
19:10:19 route,debug,calc End calculation 
19:10:19 route,debug Begin redistribution 
19:10:19 route,debug Accept update 192.168.0.0/24 
19:10:19 route,debug Accept add 10.0.0.1/32 
19:10:19 route,debug Accept add 192.168.1.0/24 
19:10:19 route,debug Commit prefix 192.168.1.0/24 
19:10:19 route,debug Commit prefix 192.168.0.0/24 
19:10:19 route,debug Commit prefix 10.0.0.1/32 
19:10:19 route,debug End redistribution 
19:10:58 pptp,debug,packet rcvd Echo-Request from 186.16
19:10:58 pptp,debug,packet     identifier=10213

terrorfrog

guys staaaaaaap

read his config

CCD file

ifconfig-push 10.0.0.2 10.0.0.1
push "route 192.168.1.0 255.255.255.0 10.0.0.1"
iroute 192.168.0.0 255.255.255.0

nobody see the error here?`?

youre pushing the serverip onto the client this is worng
you need to push a free ip double (you always need 2 ips per clients)

ifconfig-push 10.0.0.5 10.0.0.6

you can use this table

[  1,  2] [  5,  6] [  9, 10] [ 13, 14] [ 17, 18]
[ 21, 22] [ 25, 26] [ 29, 30] [ 33, 34] [ 37, 38]
[ 41, 42] [ 45, 46] [ 49, 50] [ 53, 54] [ 57, 58]
[ 61, 62] [ 65, 66] [ 69, 70] [ 73, 74] [ 77, 78]
[ 81, 82] [ 85, 86] [ 89, 90] [ 93, 94] [ 97, 98]
[101,102] [105,106] [109,110] [113,114] [117,118]

1 and 2 are already occupied by the server

second you want to

push "route 192.168.1.0 255.255.255.0 10.0.0.1"

why? a route always have the next hop as gateway, therefore the server always pushes itself as defautl gateway
so you cannot specify a gateway here nor should you. beside you already pushing it in the server config like a mother its unborn child no need todo its twice, you dont have twins 🙂

corrent ccd file would be

ifconfig-push 10.0.0.5 10.0.0.6
iroute 192.168.0.0 255.255.255.0