Multipurpose openvpn server with /30 client specific override

  • Hi everybody!

    I've spent the last two days googling and testing trying to apply this howtos:

    I'm trying to create a single VPN and some override for specific users;
    under linux everything works great. Under Windows some route is missing, the client doesn't get a gateway and so is not able to route traffic.

    here are my subnets:
    openVPN server:
    CSC subnets:,, etc.

    here my server conf:

    dev ovpns4
    verb 1
    dev-type tun
    dev-node /dev/tun4
    writepid /var/run/
    #user nobody
    #group nobody
    script-security 3
    keepalive 10 60
    proto udp
    cipher AES-128-CBC
    auth SHA1
    up /usr/local/sbin/ovpn-linkup
    down /usr/local/sbin/ovpn-linkdown
    engine cryptodev
    client-config-dir /var/etc/openvpn-csc/server4
    tls-verify "/usr/local/sbin/ovpn_auth_verify tls '' 1"
    lport 1194
    management /var/etc/openvpn/server4.sock unix
    max-clients 15
    push "route"
    push "dhcp-option DNS"
    ca /var/etc/openvpn/ 
    cert /var/etc/openvpn/server4.cert 
    key /var/etc/openvpn/server4.key 
    dh /etc/dh-parameters.1024
    crl-verify /var/etc/openvpn/server4.crl-verify 
    tls-auth /var/etc/openvpn/server4.tls-auth 0
    comp-lzo adaptive
    topology subnet

    here my csc conf:
    Tunnel network:

    push "route"

    What I've found strange, even under linux, is that in my subnet my client gets the ip… and I cannot ping any 10.33.250.x gateway...
    even if it "works"...

    any help would be really appreciated!

    Thank you

  • Under Windows some route is missing

    From VPN / OpenVPN / Client Export Utility (when the client export package is installed)

    Management Interface
    Use the OpenVPNManager Management Interface. This will activate management interface in the generated .ovpn configuration and include the OpenVPNManager program in the Windows Installers. With this management interface, OpenVPN can be used by non-administrator users.This is also useful for Windows Vista/7/8/10 systems where elevated permissions are needed to add routes to the OS.

    NOTE: This is not currently compatible with the 64-bit OpenVPN installer. It will work with the 32-bit installer on a 64-bit system.

    What I've found strange

    No, no you don't get to comangle two questions in one with insufficient detail. You said previously everything works great . Cannot ping is not great, it's broken.  It may not be allowing icmp on Firewall / Rules / OpenVPN.

Log in to reply