Hi All, Does anyone know if setting route-metric in Access Server actually works? I've tried various combinations of adding "route-metric 500" in the "Client Config Directives" box and "Server Config Directives" box on the admin UI, as well as in the clienf.conf on the client side. Seems that no matter what I do, routes on the client are still being added with a metric of 101. [list] * I see the 500 metric showing up in vpn.client.config_text and/or vpn.server.config_text in ./etc/db/config.db as appropriate, depending on where I've added it in the UI. * In /var/log/openvpnas.log I still see "route-metric 101" being pushed to the client, regardless of what's set in the UI. * Running 'sudo grep -r config_text /usr/local/openvpn_as' shows no hits other than config.db itself, which makes me wonder if any AS code is even looking at those UI boxes. [/list]

Figured it out. Silly me. Before, I only had "route-metric 500" in the "Server Config Directives" box on the admin UI. Works better when I wrap that in a "push" directive, like this: [code] push "route-metric 500" [/code] Credit goes to the push example in https://openvpn.net/images/pdf/OpenVPN_Access_Server_Sysadmin_Guide_Rev.pdf, page 31, figure 29, "Additional OpenVPN Config Directives panel on Advanced VPN page".

Access server ignores route-metric

stevegt

Hi All,

Does anyone know if setting route-metric in Access Server actually works? I've tried various combinations of adding "route-metric 500" in the "Client Config Directives" box and "Server Config Directives" box on the admin UI, as well as in the clienf.conf on the client side. Seems that no matter what I do, routes on the client are still being added with a metric of 101.

* I see the 500 metric showing up in vpn.client.config_text and/or vpn.server.config_text in ./etc/db/config.db as appropriate, depending on where I've added it in the UI.
* In /var/log/openvpnas.log I still see "route-metric 101" being pushed to the client, regardless of what's set in the UI.
* Running 'sudo grep -r config_text /usr/local/openvpn_as' shows no hits other than config.db itself, which makes me wonder if any AS code is even looking at those UI boxes.

stevegt

Version is openvpn-as 2.1.0-Ubuntu14 amd64

stevegt

Figured it out. Silly me. Before, I only had "route-metric 500" in the "Server Config Directives" box on the admin UI. Works better when I wrap that in a "push" directive, like this:

push "route-metric 500"

Credit goes to the push example in https://openvpn.net/images/pdf/OpenVPN_Access_Server_Sysadmin_Guide_Rev.pdf, page 31, figure 29, "Additional OpenVPN Config Directives panel on Advanced VPN page".