Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

We've setup OpenVPN using pfSense 2.0.2.

Local subnet is, VPN clients are

We also have another subnet which is connected through pfSense IPSec as a Site-To-Site VPN.

OpenVPN clients are able to ping hosts on subnet without any problems, but are unable to ping hosts on

pfSense itself is able to ping clients from "Diagnostics > Ping" menu, but unable to do so from shell.

We need to enable OpenVPN clients to access hosts on subnet.

Adding routes manually on OpenVPN clients doesn't help. We already tried:

route add mask
route add mask
route add mask

UPD: Still unresolved issue with traffic from to Although hosts from are able to access hosts on thanks to @chris-buechler answer

share|improve this question

You need two things. One, a push route on the OpenVPN server to send the clients a route. push "route" Then a second phase 2 with the local being and remote, and vice versa on the remote end.

share|improve this answer
Almost! Now we are able to ping from subnet hosts on subnet, but not vice versa. Should we provide any configuration files? – user135199 Jul 18 '13 at 6:37

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.