Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to setup a site to site VPN tunnel using openVPN. The server currently is setup to accept client to site connections.

When configuring a site to site tunnel (as opposed to the client to site that is currently setup), is there something different that needs to be done in order to have both client to site and site to site?

I suppose my question is: from the servers point of view, is the configuration the same, regardless of whether there will be a site-to-site connection or a client-site connection.

share|improve this question
up vote 3 down vote accepted

From OpenVPN's perspective there's no difference between a site-to-site and client-to-site connection, it's just a matter of the configuration you want. You need to decide whether you can support both with a single server instance, or whether you need two server instances running on different ports.

A site-to-site VPN will typically have iroute directives to route to subnets behind the client, whereas a client-to-site VPN won't. Since iroute directives are per-client this can be done in a single instance. You may want to push different routes however, or use a different VPN subnet, or push redirect-gateway, in which case you probably need a separate instance.

share|improve this answer
Thankyou for your answer. Exactly what I was after – Lock Aug 12 '12 at 6:33

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.