Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have an OpenVPN connection (point to point). When program connects to server it gets IP and Gateway dynamically, from server.

I need to make windows add route to my secure server through given gateway. For example open VPN gives IP:, gw: My secure server's IP is, i need to make them connected. My router, he's also working as open vpn server (MIKROTIK) see both of them, i can connect them using command route add mask, but openVPN can give different IP and gateway for different user. I want to make windows add route to DHCP specified gateway. Virtual adapter's interface number is 19, i've tried to add route like this: route add mask metric 1 if 19, but if i do route print after that it shows that my route has ~31 metric, that's more than metric for my internet connection, and it's impossilbe to reach this route.

sorry for long post, i don't know how to explain better (if i knew, i'd asked google).

p.s. as temporary solution i've made openvpn server give same ip and gateway for two users, but it's not a good solution.

UPD: User on windows 7 machine don't have administrator rights, so OpenVPN is unable to add routes.

share|improve this question
up vote 2 down vote accepted

Your best bet is to create an "on-connect" script that adds your routes as needed. There is no way for you to create a "blanket-route" that would cover every possible IP in the subnet.

as far as how to construct your "on-connect" script... you can read another question that has been answered here:

share|improve this answer
yes, i thinked of it, but the second problem i've forgot to mention is that - user, running openVPN client have limited rights, so openvpn don't have rights to add routes.. – Stalker May 15 '12 at 18:44
You may need to put the user openVPN is running as into the "Network Configuration Operators" group. This should give the user enough rights to add/delete routes without being a full admin. – TheCompWiz May 15 '12 at 18:54
Thank you! I've totally forgot about this option. – Stalker May 18 '12 at 10:31

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .