Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am attempting to connect two networks using OpenVPN using Zentyal 3.3. I have followed the instructions on Zentyal's site, but my clients on Site2 can't ping my clients on Site1, although the VPN server on Site2 can ping the clients on Site1. I suspect this has something to do with routing. Here is the routing table for the VPN server on Site2:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface   U     0      0        0 eth0   UG    0      0        0 tun0   U     0      0        0 eth1   UG    0      0        0 tun0 UH    0      0        0 tun0 is the Internet-connected ethernet adapter on Site2, is the LAN on Site1 I want to be able to ping from Site2, is the LAN on Site2, and is the VPN network.

Here is the routing table from one of the clients on Site2:

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface         UG    0      0        0 wlan0   U     9      0        0 wlan0

How can I get the clients on Site2 to connect with the clients on Site1? Thank you for any insight you have.

share|improve this question
up vote 0 down vote accepted

Check the "Advertised Networks" on the client connection for Site2 (in the Site1 server) and make sure it includes

It looks like Site2 is conection as what Zentyal calls a "Road Warrior" config rather than site-to-site.

share|improve this answer
If I add it as an advertised route, I get this in the logs on the client machine: Mon Feb 17 14:31:40 2014 /sbin/ip route add via RTNETLINK answers: File exists Mon Feb 17 14:31:40 2014 ERROR: Linux route add command failed: external program exited with error status: 2 Again, I can ping from the VPN client on Site2, just not from any client machines on on Site2. – user1722919 Feb 17 '14 at 19:32
I misread your comment. I can now ping from clients on Site2. I had to change from a TUN interface to TAP, then add (like you suggested) to advertised routes. Thanks for your help! – user1722919 Feb 17 '14 at 19:52

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.