So this is my setup. Laptop Running Ubuntu OpenVPN version 2.3.2

I connect to a OpenVPN server that connects to an off-site network.

I get the OpenVPN client running and I can ping the VPN server. The server doesn't push any routes so I need to route on the client.

Adding the off-site networks to route to the VPNserver so that I can access the off site network.

So the problem I have is that my requests don't jump from network to the off site 172...* one... Can I do anything about that on my client? I don't have any ownership of the server and routs are not pushed from server now , in the future i don't know

tun0      Link encap:UNSPEC  HWaddr 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
      inet addr:  P-t-P:  Mask:
      RX packets:0 errors:0 dropped:0 overruns:0 frame:0
      TX packets:100 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:100 
      RX bytes:0 (0.0 B)  TX bytes:12129 (12.1 KB)

wlan1     Link encap:Ethernet  HWaddr 5c:93:a2:a0:6e:1b  
      inet addr:  Bcast:  Mask:
      inet6 addr: fe80::5e93:a2ff:fea0:6e1b/64 Scope:Link
      RX packets:355109 errors:0 dropped:0 overruns:0 frame:0
      TX packets:206832 errors:0 dropped:0 overruns:0 carrier:0
      collisions:0 txqueuelen:1000 
      RX bytes:454685028 (454.6 MB)  TX bytes:23942624 (23.9 MB)

Kernel IP routing table
Destination     Gateway         Genmask         Flags   MSS Window  irtt Iface         UG        0 0          0 wlan1   U         0 0          0 wlan1 UGH       0 0          0 tun0 UH        0 0          0 tun0   UG        0 0          0 tun0   UG        0 0          0 tun0
  • Routes can be added by pusing/pulling or manual configuration in the client configuration. Is your question about how to do this without pushing routes on the server or is your question how to push them from the server to the clients (or individual ones)? Please include in your question (edit it please): 1) Whether you have control over the configuration of the server. 2) Include client OpenVPN configuration (also server if 1 was yes). This way we can help you better.
    – gertvdijk
    Apr 23, 2015 at 13:05

1 Answer 1


Looking at your routing table. There is no explicit route telling traffic to 172...* as you call it. To be sent to the VPN tun interface.

You have several options:

  1. If you have access to the OpenVPN server add this directive to the OpenVPN config:

    push "redirect-gateway def1 bypass-dhcp"

This setting will route/force all traffic to pass through the VPN. The other alternative you have. Is to add a static route yourself on the client side

  1. Add the route manually on the client side in a terminal

     sudo route add -net dev tun0
  2. OpenVPN has a directive for adding and removing of routes client side in you OpenVPN config file with with the route option.



to your OpenVPN config file on the vpn client. will add the route automatically when you connect

  1. Bonus: OpenVPN also has a up/down directive that allows you to launch a script on connect to VPN. This allows you to execute custom action like setting DNS, routes etc. But requires you to store the commands to execute in another file.

So if you had the following to your OpenVPN client config file

    script-security 2 system
    up run-stuff-after-vpn-connect.sh

Create a file named run-stuff-after-vpn-connect.sh (make sure it has execute permissions. And add:

    route add -net dev tun0

This will add the route as soon as the tunnel is up

Since you didn't give us the full declaration of your subnet in your question assuming its

  • so if i add the up route add -net dev tun in my client.conf file the rout should be shown in netstat -rn ?
    – Jocke
    Apr 23, 2015 at 13:14
  • no the vpn does not go up if i add that line in client.conf
    – Jocke
    Apr 23, 2015 at 13:20
  • 2
    @tomodachi I had to use dot notation to get this to work on an openvpn client (2.3.11) route
    – Matt
    Sep 23, 2016 at 7:35
  • 6
    On my OpenVPN 2.3.13 (Windows 10), the option route is not accepted, I have to use route instead.
    – WoJ
    Nov 23, 2016 at 7:17
  • 1
    On Linux OS also work only in client config.
    Feb 5, 2019 at 16:10

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .