I have installed OpenVPN Access Server on Ubuntu 20.04 LTS server. On the client side I use Network Manager.

The VPN server is part of a private network.

In the Admin GUI for the server I changed the default Dynamic Ip Address Network from to and then created a user.

I configured a new vpn client in Network Manager with the ovpn file. It works.

I am now wondering how to configure the routing on the client to only use the connection for the private network, not anything else. I know I need to tick "Use this connection only for resources on its network" and fill in Address, Netmask and Gateway in IPv4->Routes ... But I have no idea what values to add to include everything in the network?

Also I would like to know if there is any other config values on the server that I should be aware of.


Output from client while connected to VPN:

ip -4 route
default via dev tun0 proto static metric 50 
default via dev eno1 proto dhcp metric 100 
default via dev wlp3s0b1 proto dhcp metric 600 dev tun0 proto kernel scope link src metric 50 
123.456.789.128 via dev eno1 proto static metric 100 dev eno1 proto kernel scope link src metric 100 dev wlp3s0b1 proto kernel scope link src metric 600 dev eno1 proto static scope link metric 100 dev virbr0 proto kernel scope link src linkdown 
  • Give me a bit to answer, I'm in the middle of work stuff too so don't have a ton of instant available time :) Oct 1, 2020 at 15:12
  • Just grateful to get some guidance.... take your time.
    – Jette
    Oct 1, 2020 at 15:13

1 Answer 1


Open Access Server - Web GUI

I discovered that what I want is called "split tunneling". For this to work it is especially important to have the correct value in #4 (that is the one I missed).

  1. Configuration -> VPN Settings -> Dynamic IP Address Network

    • Value:
    • Comment: The local network accessed through this VPN is I reserved another local network for the VPN called
  2. Configuration -> VPN Settings -> Should client Internet traffic be routed through the VPN?

    • Value: No
    • Comment: The purpose of this VPN is solely to gain access to the local network.
  3. Configuration -> VPN Settings -> Group Default IP Address Network (Optional)

    • Value: [blank]
  4. Configuration -> VPN Settings -> Specify the private subnets to which all clients should be given access

    • Value:

    • Comment: This field is important. The GUI will fill it automatically, and you should check that it contains the right value.

  5. User Management -> User Permissions

    • Comment: Add a user, and press "More settings" to set the password
  6. Configuration -> Network Settings -> Admin Web Server.

    • (Local ip): Yes
    • Listen on all interfaces: No
    • Comment: Because I don't want the admin GUI publicly available.

Everything else I left untouched at default values.

Network Manager

In network manager, create a new VPN based on the opvn file, and then go to the ipv4 tab.

Below the Routes headline, Tick the "Use this connection only for resources on its network" option and fill in




Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.