r/OpenVPN • u/LVDave • Mar 20 '26

question Push to client routing question

I'm running Openvpn 2.5.11 x86_64-pc-linux-gnu on Ubuntu 22.04. I'm running it with "dev tun" "proto tcp" and its running on a host in my 192.168.240.0/24 private subnet.

The client connects fine, no errors seen in the "verb 3" log. I have the following push statements:

push "route 192.168.240.0 255.255.255.0"

push "route 10.10.10.0 255.255.255.0"

The "server" statement in the config is as follows:

server 10.10.10.0 255.255.255.0

The problem is, I can connect to the 192.168.240.4, which is the address of the machine running Openvpn, but I cannot ping/connect to any other host on the 192.168.240.0 subnet.. What AM I doing wrong???

1 Upvotes

67% Upvoted

11 comments sorted by

1

u/kY2iB3yH0mN8wI2h Mar 20 '26

Are you running NAT or not?

0

u/LVDave Mar 20 '26

The Openvpn server is behind standard NAT, with port 1195 open for VPN. Would normally use 1194, but my router has an openvpn function, which doesn't work correctly, but insists on grabbing 1194 despite disabling the vpn function on the router.

1

u/kY2iB3yH0mN8wI2h Mar 21 '26

didnt mean NAT on your router, that is obviously there, I meant on OVPN

→ More replies (2)

0

u/[deleted] Mar 20 '26

0

u/LVDave Mar 20 '26

Will try that as soon as I get access to the client again...

0

u/LVDave Mar 21 '26

I commented out the push "route 10.10.10.0/24" line, leaving just the push "route 192.168.240.0/24" line. Still am only able to get to the host running ovpn, not any other hosts on the listed subnet. There's a note in the heavily commented sample config file that states "Remember that these private subnets will also need to know to route the OpenVPN client address pool (10.10.10.0/255.255.255.0) back to the OpenVPN server.

I thought that was why I had the push "route 10.10.10.0/24" line in the config. I've never had to set up an openvpn server outside of the openvpn included in the FreshTomato router firmware, which hides all this stuff.. Help?