Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

With OpenVPN there is a well-known option "push" which allows to push an IP static route from the server to a connected OpenVPN client.
I would like to know if there is an equivalent of this option on:

  1. L2TP over IPsec VPN?
  2. IPsec (cisco compat) VPN?
  3. Juniper SA (aka Juneos Pulse, aka NC) SSL VPN?
share|improve this question
I can tell you that the Cisco VPN client family lets you set which subnets get routed through the VPN ("split tunneling"), but it doesn't have the flexibility to do any more creative route injection. – Shane Madden Dec 21 '11 at 16:49
but that is configured on the cisco vpn client, right? I am talking about pushing route table from VPN server to a freshly connected client (like OpenVPN). – Alex Dec 22 '11 at 1:28
No, the server decides which networks are tunneled or not in their split tunnel implementation. – Shane Madden Dec 22 '11 at 1:35
Thank you Shane, do you know situation with L2TP and Junos Pulse? – Alex Dec 22 '11 at 1:41
Can't say that I do, sorry. – Shane Madden Dec 22 '11 at 2:43
up vote 1 down vote accepted

Have to answer my own question after some research:

  1. L2TP over IPsec VPN -- cannot push routes to clients (L2TP/PPP protocol limitations)
  2. Cisco IPsec -- can push routes (thanks Shane, upvoted your comments)
  3. Junos Pulse -- can push routes (according to docs, still to be tested)
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.