Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have the following situation. I have a root server, which acts as a VPN server for my company network and as a VPN client to multiple customer-networks. Every seperate connection works (I can ping anyone from my root server, and my root server can be pinged from the corresponding networks).

But now I want the clients in my company network to be able to access all the customers computers, but the customers shouldn't be able to access me and each other. Is that possible?


  • My PC has the IP and is in the net
  • My customers server has the IP and is in the net

My PC now has the following entry in the routing table: [...]

And my root server ( has the following entry: [...]

The customers VPN server ( knows nothing about my net. I can ping everyone on my root-server, and everyone can ping my root server (with the according address). But my PC cannot reach my customers server. I have routing installed on my root server (Windows Server 2008 R2) and it is up and running.

What do I need to do to make this work?

share|improve this question
From where comes your route on your PC ? did you setup it by yourself ? seems it is not a valid route because the gateway for subnet seems to be – krisFR Dec 23 '13 at 23:25
It comes from OpenVPN push "route" in the server config. Shouldn't be the gateway for the network, for computers in the network? – LueTm Dec 23 '13 at 23:28
No, to me gateway for network should be this...or ask you this question : is gateway able to route subnet (have a look at the routing table of gateway ? – krisFR Dec 23 '13 at 23:31
Yes, is a root server, which has routing installed and should route those two networks. Let me try the other gatweway. – LueTm Dec 23 '13 at 23:35
No, that doens't work either. – LueTm Dec 23 '13 at 23:43

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.