Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am using the following openvpn config:

port 1194
proto udp
dev tun
ca keys/ca.crt
cert keys/openvpn-server.crt
key keys/openvpn-server.key
dh keys/dh1024.pem
crl-verify keys/crl.pem
client-config-dir /etc/openvpn/ccd
ifconfig-pool-persist ipp.txt
keepalive 10 60
status openvpn-status.log
verb 4 
push "route"

In the /etc/openvpn/ccd directory I have some files that contain ipconfig-push directives like so:


I have something like this in my openvpn-status.log:

Updated,Thu Jul  3 12:24:18 2014
Common Name,Real Address,Bytes Received,Bytes Sent,Connected Since
host01,<public ip>:41283,6597296,9666006,Thu Jul  3 11:48:06  11:31:15    2014
Virtual Address,Common Name,Real Address,Last Ref,host1,<public ip>:41283,Thu Jul  3 12:24:17 2014
Max bcast/mcast queue length,1

The problem is that after some time, the vpn server drops that route, so I only get the entry for host01 in the OpenVPN CLIENT LIST but not in the routing table.

In the logs I only get the message:

Jul 3 06:47:39 ovpn-server[32764]: host1/:56293 MULTI: bad source address from client [], packet dropped

After the route is dropped, so obviously the vpn server does not recognize that host because it doesn't know where to route the package.

Do you know what can be wrong with my setup that makes the vpn server drop routes?

share|improve this question
Try to investigate when this is happening. Is it possible that another client connects and gets the same IP address assigned? Does it happen after a rekey or a reconnect? – the-wabbit Jul 3 '14 at 12:49
Yeah that's right. Somehow two clients are getting the same ip addres... Thank you.. don't know how to solve this tho. – simao Jul 3 '14 at 13:19
does the client with the conflicting IP address have a CCD ifconfig-push entry? – the-wabbit Jul 3 '14 at 20:51

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.