I have the following setup:

 --------------------------------      ---------------------------------
|Windows server 2012            |      |PFsense router                 |
|Running OpenVPN server         | <--> |Acts as OpenVPN client         |
|Server has WAN only (        |LAN: WAN: |
|OpenVPN IP:                  |OpenVPN IP:
 --------------------------------      ---------------------------------

                                        | Windows client              | 
                                        | LAN:            |

I want the Windows Server 2012 to be able to access the LAN of the PFsense. The Windows client in the PFsense LAN needs to be able communicate with the Server 2012 box as well.

How can I do this?

It would be great if I could integrate the OpenVPN network in the LAN network using the same IP range, but I dont think this is possible. For example if one pings it redirects to the VPN IP


3 Answers 3


Your question is all about routing.

You basically will need two things.

  • A route on the Windows box directing all the to the VPN host.
  • An internal route in OpenVPN directing to a particular remote client.

So in your OpenVPN server config you could do something like this.


In your ccd file for the remote site add


For more info, see:

  • 1
    I added route to the command and restarted OpenVPN. It doenst appear to work. When I ping I get this message: Reply from TTL expired in transit. It looks like I get those messages for all private IP ranges I try to ping btw. Here is the output of my routes on the Windows Server machine:pastebin.com/fGEKdSVg Any thoughts?
    – Jur Groen
    Jan 26, 2015 at 19:48
  • I cant add a CCD option when using OpennVPN a a client :( openvpn[71475]: Options error: --client-config-dir/--ccd-exclusive requires --mode server
    – Jur Groen
    Jan 26, 2015 at 20:09
  • 1
    It worked in the end! Route needed to be: route Thnx!
    – Jur Groen
    Jan 29, 2015 at 11:23

You can also push a route to the client (Windows from server (Windows with push "route" in the openvpn-server.conf file


in the ccd file of that client, add "iroute" also in the configuration of the server add line: route

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.