After upgrading to OpenVPN Connect 3.9.0 (6050) on my macOS 27.0.1, I can no longer ping other clients (confirmed that it works well up to 3.8.2)
I have followed the instruction to enable VPN configurations in the macOS settings, and I confirm that it configures OK and I can see the VPN connection in macOS built-in preference settings.
The server side has enabled client-to-client communication.
My own VPN subnet is 10.198.19.0/24.
I have checked with netstat -nr, and it turns out the routing table has no entry of 10.198.19.0/24. After I manually adding the entry, it finally works out:
sudo route -n add -net 10.198.19.0/24 -interface utun15
However, this additional step is not required up to 3.8.2.
A little evidence that I think it may be useful:
In my .ovpn settings, I customize the tun name:
client
dev my-custom-vpn-tun-name
dev-type tun
However, after upgrading to 3.9.0, the tun name has become a random number utunXX (utun15 in my computer).
Some logs (sensitive IPs are sanitized):
[Oct 25, 2026, 13:38:26] [Creds] no saved credentials (result=Empty) — interactive prompt expected
[Oct 25, 2026, 13:38:26] configuration validated
[Oct 25, 2026, 13:38:26] OpenVPN core 3.11.8 mac arm64 64-bit
[Oct 25, 2026, 13:38:26] Frame=512/2112/512 control-channel-payload=1170
[Oct 25, 2026, 13:38:26] NOTE: This configuration contains options that were not used:
[Oct 25, 2026, 13:38:26] Unsupported option (ignored)
[Oct 25, 2026, 13:38:26] 0 [resolv-retry] [infinite]
[Oct 25, 2026, 13:38:26] 1 [persist-key]
[Oct 25, 2026, 13:38:26] 2 [persist-tun]
[Oct 25, 2026, 13:38:26] EVENT: RESOLVE
[Oct 25, 2026, 13:38:26] Contacting XXXXXXXX via UDP
[Oct 25, 2026, 13:38:26] EVENT: WAIT
[Oct 25, 2026, 13:38:26] Connecting to [XXXXX]:XXXX (XXXXXX) via UDP
[Oct 25, 2026, 13:38:26] EVENT: CONNECTING
[Oct 25, 2026, 13:38:26] Tunnel Options:V4,dev-type tun,link-mtu 1521,tun-mtu 1500,proto UDPv4,cipher AES-256-GCM,auth [null-digest],keysize 256,key-method 2,tls-client
[Oct 25, 2026, 13:38:26] Creds: UsernameEmpty/PasswordEmpty
[Oct 25, 2026, 13:38:26] Sending Peer Info:
IV_VER=3.11.8
IV_PLAT=mac
IV_NCP=2
IV_TCPNL=1
IV_PROTO=8094
IV_MTU=1600
IV_CIPHERS=AES-128-CBC:AES-192-CBC:AES-256-CBC:AES-128-GCM:AES-192-GCM:AES-256-GCM:CHACHA20-POLY1305
IV_AUTO_SESS=1
IV_GUI_VER=OCmacOS_3.9.0-6050
IV_SSO=webauth,crtext
[Oct 25, 2026, 13:38:26] SSL Handshake: peer certificate: CN=server, 2048 bit RSA, cipher: TLS_AES_256_GCM_SHA384 TLSv1.3 Kx=any Au=any Enc=AESGCM(256) Mac=AEAD
[Oct 25, 2026, 13:38:26] Session is ACTIVE
[Oct 25, 2026, 13:38:26] EVENT: GET_CONFIG
[Oct 25, 2026, 13:38:26] Sending PUSH_REQUEST to server...
[Oct 25, 2026, 13:38:26] OPTIONS:
0 [route-gateway] [10.198.19.1]
1 [topology] [subnet]
2 [ping] [10]
3 [ping-restart] [120]
4 [ifconfig] [10.198.19.16] [255.255.255.0]
5 [peer-id] [28]
6 [cipher] [AES-256-GCM]
[Oct 25, 2026, 13:38:26] PROTOCOL OPTIONS:
key-derivation: OpenVPN PRF
control channel: tls-crypt enabled
data channel: cipher AES-256-GCM, peer-id 28
[Oct 25, 2026, 13:38:26] TunPersist: short-term connection scope
[Oct 25, 2026, 13:38:26] EVENT: ASSIGN_IP
[Oct 25, 2026, 13:38:26] tun_builder_add_address address=10.198.19.16 prefix_length=24 gateway=10.198.19.1 ipv6=0 net30=0
[Oct 25, 2026, 13:38:26] tun_builder_reroute_gw ipv4=0 ipv6=0 flags=256
[Oct 25, 2026, 13:38:26] CAPTURED OPTIONS:
Session Name: XXXXXX
Layer: OSI_LAYER_3
Remote Address: XXXXXXX
Tunnel Addresses:
10.198.19.16/24 -> 10.198.19.1
Reroute Gateway: IPv4=0 IPv6=0 flags=[ IPv4 ]
Block IPv4: no
Block IPv6: no
Block local DNS: no
Add Routes:
Exclude Routes:
[Oct 25, 2026, 13:38:26] Connected via NetworkExtensionTUN
[Oct 25, 2026, 13:38:26] EVENT: CONNECTED XXXXXX:XXXXX (XXXXXXX) via /UDP on NetworkExtensionTUN/10.198.19.16/ gw=[/] mtu=(default)
