Can't add multiple routes OpenVPN server

brazza

Hello everyone!!!

I'm new to OpenVPN, so sorry if my question seems silly to you.
I need to deploy OpenVPN server for remote users with split tunneling (networks behind VPN server). Due to some guides I successfully installed and configured server and client sides. Connection is established but...
When I add

push "route network_addresss mask"
push "route another_network_address mask"

to server config file server can't start. Log message is: "Options error: Unrecognized option or missing or extra parameter(s) in config_file_path:143: push (2.5.5) Use --help for more information". At the same time if I leave only one push "route ..." option it works fine.

Mabye some ideas about this error or about other ways to configure split tunneling?

OpenVPN server version: 2.5.5
Server's OS: Windows Server 2016
Client's OpenVPN Connect version: 3.3.5

Server config:

port 1194
proto udp
dev tun
ca ca.crt
cert server.crt
key server.key  
dh dh.pem
server 10.38.196.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.38.14.0 255.255.255.0" 
push "route 10.38.15.0 255.255.255.0"
keepalive 20 60
tls-auth ta.key
cipher AES-256-GCM
persist-key
persist-tun
status status.log
log openvpn.log
verb 3
mute 20
windows-driver wintun
explicit-exit-notify 1

Client config:

client
dev tun
proto udp
remote [i]domain_name[/i] 1194
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client.crt
key client.key
remote-cert-tls server
tls-auth ta.key 1
cipher AES-256-GCM
connect-retry-max 25
verb 3

brazza

I found another way to push multiple routes to clients - using client-config-dir directive in server config file. You can find info about the feature in this book:

For short, you can assign additional settings personally for each user in separate file with a name CN_of_user or common additional setting for all users in DEFAULT file. In my case I just write

push "route 10.38.14.0 255.255.255.0"
push "route 10.38.15.0 255.255.255.0"

in DEFAULT file.

TinCanTech

Clearly, you did not post your real config file because:

brazza wrote "Options error: Unrecognized option or missing or extra parameter(s) in config_file_path:143: push (2.5.5) Use --help for more information"

143 means at line 143 there is an error.

In this case the error is an empty --push

Fix your server config before you start hacking away with CCDs etc ..

brazza

TinCanTech wrote
143 means at line 143 there is an error.

Thank you so much. Opened server config file with notepad++ and saw

push "route 10.38.14.0 255.255.255.0"push "route 10.38.15.0 255.255.255.0"

string(((
Don't no why Windows notepad work incorrect in server config file but work perfect in ccd.

TinCanTech

brazza wrote Don't no why Windows notepad work incorrect

Because notepad.exe does not know how to use newline character. Use notepad++

openvpn_inc

Hi brazza,

Please note that 10.38.14.0/24 and 10.30.15.0/24 can be addressed in a single CIDR expression: 10.38.14.0/23.

push "route 10.38.14.0 255.255.254.0"

I recommend to plan your RFC 1918 networks along CIDR boundaries.

regards, rob0