I'm using ccd OpenVPN settings to make static keys for each users.

My Server config looks like

cat openvpn.conf
dev tun
proto udp
port 1194
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key
dh /etc/openvpn/easy-rsa/keys/dh1024.pem
user nobody
group nogroup
status /var/log/openvpn-status.log
verb 3
push "route"
client-config-dir ccd
management localhost 7505
push "redirect-gateway def1"
#push "redirect-gateway def1"
#set the dns servers
push "dhcp-option DNS"
push "dhcp-option DNS"
log-append /var/log/openvpn

and ccd for user looks like


When default configuration clients can be accessible from any VPN network device and it can access any device on network , client this ccd configured client can not be accessed from net and it can not access / ping any VPN network device.

I've browsed around , found similar problems , and changed configuration according to them , but it did not help me.

How can I make this ccd client to access other devices and that this client would be accessible from other OpenVPN devices?


From here:

Each pair of ifconfig-push addresses represent the virtual client and server IP endpoints. They must be taken from successive /30 subnets in order to be compatible with Windows clients and the TAP-Windows driver. Specifically, the last octet in the IP address of each endpoint pair must be taken from this set:

Fix your ccd config:


Since you have /30 networks, is a broadcast address for, and cannot be used as a client IP.

  • I'm kind a newbie ,I've even read this part , but did not get the point of it. Do I have to take range of 30 address or pairs like it is shown in example ([1 2] "ifconfig-push" , [5 , 6] "ifconfig-push"). I've tried it , but it did not help me.Can you explain a little bit more ? – Universal Coder Oct 21 '13 at 11:44
  • Ok , I found solution here : superuser.com/questions/663024/… – Universal Coder Oct 21 '13 at 13:15

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.