We have hundreds of clients using the same server side vpn config successfully. We normally push 10.0.0.0/8 as the subnet that will pass traffic to our openvpn gw.
For a couple of our clients which use portions of the 10.0.0.0/8 subnet openvpn pushes a default route even though the configuration says not to. At least that is what appears to happen. Something else on the client side might be setting it.
Odd thing is it seems to work correctly with an older windows openvpn client(2.0.0.400) but not with (2.1.0.xxx). The openvpn server version we are using is 2.0.26
Here are the before and after routes on the client:
Before:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.1.0.1 10.1.0.122 30
10.1.0.0 255.255.248.0 On-link 10.1.0.122 286
10.1.0.122 255.255.255.255 On-link 10.1.0.122 286
10.1.7.255 255.255.255.255 On-link 10.1.0.122 286
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.1.0.122 286
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.1.0.122 286
After connecting to openvpn:
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 10.1.0.1 10.1.0.122 25
0.0.0.0 0.0.0.0 10.41.100.1 10.41.100.43 21(pushe default route)
10.0.0.0 255.0.0.0 10.41.100.1 10.41.100.43 276
10.1.0.0 255.255.248.0 On-link 10.1.0.122 281
10.1.0.122 255.255.255.255 On-link 10.1.0.122 281
10.1.7.255 255.255.255.255 On-link 10.1.0.122 281
10.41.100.0 255.255.255.192 On-link 10.41.100.43 276
10.41.100.43 255.255.255.255 On-link 10.41.100.43 276
10.41.100.63 255.255.255.255 On-link 10.41.100.43 276
127.0.0.0 255.0.0.0 On-link 127.0.0.1 306
127.0.0.1 255.255.255.255 On-link 127.0.0.1 306
127.255.255.255 255.255.255.255 On-link 127.0.0.1 306
192.168.128.0 255.255.255.0 10.41.100.1 10.41.100.43 276
224.0.0.0 240.0.0.0 On-link 127.0.0.1 306
224.0.0.0 240.0.0.0 On-link 10.41.100.43 276
224.0.0.0 240.0.0.0 On-link 10.1.0.122 281
255.255.255.255 255.255.255.255 On-link 127.0.0.1 306
255.255.255.255 255.255.255.255 On-link 10.41.100.43 276
255.255.255.255 255.255.255.255 On-link 10.1.0.122 281
===========================================================================
Any help or advice appreciated.
thanks!
