Nethserver 7 behind Mikrotik RB750gr3

Hello everyone I have a Nethserver 7 as a VPN server to create the VPN on it as follows:
port 1194
Authenticated and certified customers

The company’s local network has a Mikrotik RB750GR3 router
wan : pppoe with ip dimamico use RB cloud and is also the gateway and dns of the IP network:

I connect to VPN mkais not access the local network., I’ve followed several documents on route creation in RB, but still without access to the local network

@onlitec AFAIK NethServer works as VPN server only with two interfaces.
a GREEN one which should be the gateway for the all the hosts of the network.
a RED one, which should be used by the Nethserver to connecting to internet.


Hello, i think first of all you need to check who will be managing your connections, if its the RB750 you might need to create some rules to make VPN on your nethserver avaliable to the internet.
PS: I never tried this one before, i don´t know what kind of rules you need to create, but i guess something with the UDP 1194 port.

As pike already mentioned, you need 2 nics either way.

The other way is to use the RB750 just as a WAN auth, and create a DMZ rule to your nethserver, letting your nethserver take care of all the connections, thats a good way to manage your network, entirely in nethserver! :slight_smile:

AFAIK It works with one interface (“server mode”) too. If Neth is not the router then you need to port forward the used port as @ssabbath explained (this seems to work already as you can connect to the VPN server) and setup a static route on the router (this allows you to connect to the local network)

I don’t know about mikrotik but in the mikrotik wiki are instructions for setting up a static route.

1 Like

makes sense… but wierd setup, not border firewall as vpn :slight_smile:

That’s my problem, I followed the Wiki and it still doesn’t work

This with two interfaces I connect to the VPN the problem is the route I need to create in Mikrotik

I am sorry, but i cannot imagine/guess the current layout of the network.
Would you please provide some more info, please?

If you need a small flowchart designer, consider

1 Like

I used to miss Micro$oft Visio so much until i started using

Before that i used Dia draws your structured diagrams: Free Windows, Mac OS X and Linux version of the popular open source program and they suck! :stuck_out_tongue: hahaha

DIA is solid, but not that noob-friendly, IMVHO

1 Like

I agree, i am a noob! hahaha! :rofl:

Hi, I made this simple diagram to make it easier to understand

1 Like

Yup, you should create port forwads/rules in mikrotkit, like every packet that comes with UDP 1194 should be routed to

i dont know exactly how to do this, i would know if i had any access to a mikrotkit right now, but i would start from here:

Thanks, great tutorial, I think I can now, all the others are just text and even I copying and pasting the error, I change it to my scenario but I didn’t add it.

IDK Mikrotik devices (never worked on yet), some of these boxes/firmwares like to have both NAT and firewall rules to allow traffic…

The think that concernes me is that… VPN IMVHO should be bridged to green to work correctly, in this scenario.
Otherwise routing can became quite messy.
Also, routing to VPN clients should provide Mikrotik as gateway.

The network configuration on the Nethserver is like this:

In the DHCP options the DNS (and WINS) should be the Nethserver (IIRC an empty field defaults to Nethserver IP) or the internal DNS you are using.

You should enable “push all static routes”, so the clients get the routes.

What about using the new server manager instead of the old one? :wink:

Hello it was configured in this way that you mentioned more the proplema continued so I disabled it, but now I realized that the problem is in Mikrotik, I need information about the routes in Mikrotik

You only need to add one route on the Mikrotik. Destination is (VPN network address) and the gateway is (NethServer)

Create the route putting the VPN server as a gateway, but it is not the network gateway the network gateway is the Mikrotik on IP, but I put the vpn server as a gateway, I was able to access the Mikrotik through the VPN and some others IPs but precisely the IP I need which is the I can’t access, I didn’t understand why to access some and not others.