I am trying to figure out how to setup routing on OpenVPN.

I have successful connection between client (OS X Snow Leopard) and server (OS X Leopard Server), and each can ping the other. However, I am wanting the connecting client to be able to access other machines on the network.

Here is how my network is laid out. On the server side there is a Verizon Fios router that has a public dynamic IP address (which I know through DynDNS.org), and an internal address of The router is configured with a machine in the DMZ of

This machine ( is hosting OpenVPN and all other machines I want to connect to are on the 10.50.60.x network.

The client is connecting in from different locations (although the one I am testing from right now has assigned me the address of

OpenVPN is configured to work on the network and assigns IP addresses successfully to the client machine. I have done it this way because of what I have read. I am fine changing this anyway that is needed to work. I have attached the server config file below, as you can probably see from the ‘push’ and ifconfig entries I am not quite sure what I am doing. Can you let me know how I would configure this so that once the VPN is connected I can ping and access and my other machines on the 10.50.60.x network?

My server config file is as follows:

dev tun
ca /etc/openvpn/openvpn2/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/openvpn2/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/openvpn2/easy-rsa/2.0/keys/server.key  # This file should be kept secret
dh /etc/openvpn/openvpn2/easy-rsa/2.0/keys/dh1024.pem
verb 3
keepalive 10 60
push "route"
push "ifconfig"
max-clients 5
ifconfig-pool-persist /etc/openvpn/ipp.txt

Any help would be really appreciated.




Your config, annotated:

# we're in server mode, server takes, everything else is left for clients

# tell clients they can reach through
push "route"

# I don't know what this is, commenting it out
#push "ifconfig"

# I don't know what this is either

Everything else looks ok to me.

Two things need to happen: 1) your VPN server needs to be configured to pass traffic LAN <---> remote VPN client. From terminal:

sudo sysctl -w net.inet.ip.forwarding=1

2) the other machines on the LAN need to know how to reach the remote VPN clients. An easy way to do this would to be to add a static route on your FIOS actiontec router, to via

Hope this helps.

  • Thanks for taking the time to help me with this. I followed your directions and was able to figure it out. Much appreciated! – user36366 Mar 3 '10 at 1:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy