Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to set up the OpenVPN VMware ESXi Virtual Appliance. I have downloaded and loaded the VM and gotten it running. I am using the web UI at this point with local authentication. I have created a user and I can log into the server from home using that user. I have assigned a static IP to my user, I can see that IP on my local network adapter, and I can ping the IP address of the server (the IP that is internal to the remote site). The problem is I cannot ping anything else on the network. I am trying to do routing, not NAT, because I need seamless access to the entire network (software development/testing purposes). I don't want anything in the middle mucking with my connection. Below are two screenshots showing my configuration:

VPN Settings

VPN Settings Screen

User Settings for My User

User Settings Screen

Any help would be appreciated, I'm pretty new to this stuff and it just doesn't seem like it should be this hard.

share|improve this question
up vote 2 down vote accepted

The routed network you provided, that is a different network, from the LAN the OpenVPN server is running on right?

Have you added a route for VPN network, on the router that all the clients are on that LAN are using for a default gateway?

Since that network is different, the clients on the LAN must know how to get to it, but I would guess the only route they have is their default gateway. So they would not know about or how to reach devices on the other side of the VPN.

The important thing to remember about routing is that you must think about both directions of the traffic. It is easy to add the configuration for getting packets out of a gateway, but overlook the fact, that you have to add configuration to other systems to get the packets too the gateway.

share|improve this answer
The IP address of the VM is I'm not sure what you are trying to say (I apologize for my minimal knowledge in this area). Do I need to create a route in the VM, with iptables or something similar? – Nik Jun 26 '12 at 17:10
Well I can give you a lot more detail, if you spend some time describing your network in more detail. What other routers exist, what subnets, what IP addresses are assigned to what router interfaces, and what route tables exist. – Zoredache Jun 26 '12 at 17:23
We're just a small company with a single subnet ( Our "router" is our firewall (one port is the public IP, the other is The VM is (eth0), there is port forwarding in the firewall to pass the OpenVPN stuff through to the VM. When I log in my VPN assigned IP is Everything resides on the subnet. – Nik Jun 26 '12 at 17:37
So is the OpenVPN in routed or bridged mode? What IP addresses to the OpenVPN clients get? If it is in routed mode, you cannot use the same subnet for VPN clients as you have defined on your network. If it is in routed mode, you need to add a route for the VPN Client subnet, to your Router – Zoredache Jun 26 '12 at 17:57
I'm not sure what mode it's in and I can't find the config files in the virtual appliance (not sure where to look). I changed it so that clients connect to the network. I want to bridge it to the network. When I log in as a user, I get a address and I can ping and, but not If I show the IP routes on the VM, one of the lines says dev eth0 proto kernel scope link src, which I thought would route between the networks, but it clearly does not. – Nik Jun 26 '12 at 22:04

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.