I am wondering how I should do this. I can reach both clients (nielswork en nielsnet from the OpenVPN server (Ubuntu 18.04 LTS): nielsserver) but I would also like to reach nielsnet from nielswork and vice versa, via the VPN. All the machines are in the same network ( and IP forwarding is turned on on the server. The weird thing is that they all have different gateways, although I'm not sure this is the problem. I am not pushing any routes to clients (yet) and I'm not using the VPN for all my traffic, just NFS/SSH. Here is the output of route for the tun0 devices.

ON NIELSWORK (CLIENT1): UGH   50     0        0 tun0        *      UH    50     0        0 tun0

ON NIELSSERVER (OPENVPN SERVER)   UG    0      0        0 tun0 UH    0      0        0 tun0

ON NIELSNET (CLIENT2): UGH   50     0        0 tun0        *      UH    50     0        0 tun0
  • The IP adresses of tun0 on nielswork, nielsserver and nielsnet are, and, respectively...
    – Niels
    Aug 8, 2018 at 13:01

2 Answers 2


The whole thing seems to be properly solved by uncommenting


in /etc/openvpn/server.conf

which states in the file itself:

# Uncomment this directive to allow different
# clients to be able to "see" each other.
# By default, clients will only see the server.
# To force clients to only see the server, you
# will also need to appropriately firewall the
# server's TUN/TAP interface.

Although the weird thing that all the clients and the server have a different gateway in routing table, they can now happily communicate with eachother.


If you are using openvpn-as as VPN server, you just need to allow routing in private subnets.

This can be achieved in "VPN settings" section of admin webgui:

  1. at the question "Should VPN clients have access to private subnets", set "yes using routing" or "yes using NAT"
  2. then add the private subnet in list below (e.g.
  3. save and apply on running server, this is done.
  • how is this accomplished in /etc/openvpn/server.conf?
    – Niels
    Aug 8, 2018 at 19:12
  • sorry, not sure how this can be done directly in conf files, openvpn_as looks like holding the configuration done in webgui in a db.
    – tonioc
    Aug 9, 2018 at 13:48

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .