Can OpenVPN inject hostroutes into OSPF?

crunch

Hi,

I'm running an OpenVPN server handing out public IP addresses to clients, authentication is done through radius.
This is basically a zero-config setup on OpenVPN side as all client specific information is done throuth the radius configuration.

This works pretty well, however I need to add a route into the IP segment used for VPN. Now, the clients should be using IP addresses from various segments and when no VPN is established, the IP should be routed to a VServer instance instead.
I already have OSPF set up between various nodes working fine.

What I would like to achive is OpenVPN injecting a hostroute into the kernel's routing table when a client connects and remove it again when it disconnects. This could then be distributed into OSPF by Quagga.

Can this be achived with OpenVPN?

Underlying OS is Debian stable.

Thanks.

crunch

debbie10t wroteIn your openvpn server config file:
push "route inetaddr mask gateway"
route will be added to the client route table on connect and removed on disconnect by openvpn.

Alternatively, you could use an openvpn up/down script on the client.

In my setup, multiple clients connect to the VPN server and authenticate against the radius which also hands out IP addresses. Traffic to IP addresses currently connected through VPN should be routed to the VPN server, traffic for unconnected clients should be routed elsewhere.

tl;dr: I need the route in the server's route table, not in the client's.

crunch

debbie10t wrote
crunch wroteTraffic to IP addresses currently connected through VPN should be routed to the VPN server, traffic for unconnected clients should be routed elsewhere.
This is exactly
push "redirect-gateway def1"

No, it isn't. That's setting a route on the client, but I need to inject a route into my backbone network infrastructure from the server.

client-connect and client-disconnect might be my best options.