I have set up an OpenVPN network and I'd like to let every client in the network be able to connect to each other, ie. servers, and should be able to communicate over VPN and clients (running on various platforms) with IPs,, should able to connect to all servers.

I have already set up servers and running Ubuntu 14.04 x64 and they seem to work properly, but I can't get a client running Windows with IP to connect to both servers - connections seem to timeout.

Here's the server.conf running on

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key
dh dh2048.pem
ifconfig-pool-persist ipp.txt
client-config-dir /etc/openvpn/staticclients
keepalive 10 120
status openvpn-status.log
verb 3

There's no static IP definition in staticclients for the Windows client.

Here's the client.ovpn that I run on my Windows PC:

dev tun
proto udp
remote serverx.startup.io 1194
resolv-retry infinite
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
verb 3

It connects properly, gets an IP assigned, but it can't connect to any IP in the network.

Here's the result of route print -4 ran on the client:

IPv4 Route Table
Active Routes:
Network Destination        Netmask          Gateway       Interface  Metric
     10         On-link    276         On-link    276         On-link    276

What's wrong with my setup? Why I can't connect to the OpenVPN host and the second server from the client?

2 Answers 2


Suprisingly, the solution was to run OpenVPN as an admin, which is stated somewhere in the OpenVPN docs. You don't have to use it with dev tap, so it's not enforced by default.


Your subnet is wrong On-link 276 and apear on the different network to the system Therefore, all packets are routed to the default gateway

This page explains why do you get that subnet mask

There are some caveats to be aware of when using "tun" style devices on Windows: the --ifconfig endpoints chosen must be the two "middle" addresses in a subnet.

Try dev tap

Upd: oh, you figured it out by yourself. windows route command requires elevation, so you weren't getting correct routes.

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .