I have an OpenVPN server which runs with two configurations - first one is

port 1194
proto udp
dev tun

while the second one is

port 443
proto tcp
dev tun
port-share ${my-ip} 10443

I keep them this way since I prefer the udp one, but port 443 is accessible everywhere, while 1194 is not. Also port-sharing makes apache ssl logs less useful.

I use different subnets for each configuration:

ifconfig-pool-persist ipp.txt


ifconfig-pool-persist ipp-port-share.txt

However, with this config a client from the first config ( will be unable to connect to a client from the second config ( ).

What can I do so that the two client subnets can communicate?


You need to declare a route to for clients of the first configuration and on the second. Use this in your first configuration file, and the converse in your second:

push "route"
| improve this answer | |
  • Thanks for the reply. I have done the changes: - ip forwarding is on ( /proc/sys/net/ipv4/ip_forward = 1 ) - added the push configurations, restarted the server + 1 client on each subnet However, the clients stil don't see each other. I am able to ping the gateway, e.g. from I can ping, but not beyond. – Robert Munteanu Oct 28 '15 at 6:19
  • @RobertMunteanu do you get the route added on the clients? – roaima Oct 28 '15 at 9:19
  • yes, the route is added. I expected the ping to would not work otherwise for a 10.25.1.x client – Robert Munteanu Oct 28 '15 at 10:29

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.