We have two subnets at our office right now and OpenVPN setup to connect to one of them. I tried pushing the route to the second subnet and it shows up on my client. But I can't ping any PCs on it. If I delete the route on the client and do a route add for the subnet, it works. The only difference I see is that open VPN adds the route with a gateway (the OpenVPN server IP) while route add has On-Link for the gateway. Note that the server is running Windows XP and this particular client is running vista. I know I've seen the same thing in Win7 but don't remember if I've ever tried on XP.
After OpenVPN connection
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.16.1 192.168.16.2 30
10.60.16.0 255.255.240.0 192.168.15.22 192.168.15.217 30
192.168.15.0 255.255.255.0 On-link 192.168.15.217 286
92.168.15.217 255.255.255.255 On-link 192.168.15.217 286
92.168.15.255 255.255.255.255 On-link 192.168.15.217 286
Manual execute route add
IPv4 Route Table
===========================================================================
Active Routes:
Network Destination Netmask Gateway Interface Metric
0.0.0.0 0.0.0.0 192.168.16.1 192.168.16.2 30
10.60.16.0 255.255.240.0 On-link 192.168.15.217 60
192.168.15.0 255.255.255.0 On-link 192.168.15.217 286
92.168.15.217 255.255.255.255 On-link 192.168.15.217 286
92.168.15.255 255.255.255.255 On-link 192.168.15.217 286
Maybe there are better ways to set this up. I've thought about going the tunnel route instead of bridged. But it's been working for years and I don't really want to mess with it any more than I have to. I just want to be able to add the route in a way that works correctly. And since I can manually add the route on the client, it seems there should be a way to have it do that for me. Below are my server and client configs. Thanks.
Server Config...
mode server
port 1195
proto udp
dev tap
duplicate-cn
ca "****"
cert "****"
key "****"
dh "****"
server-bridge 192.168.15.22 255.255.255.0 192.168.15.210 192.168.15.224
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
crl-verify "****"
push "route 10.60.16.0 255.255.240.0"
Client config
client
dev tap
proto udp
remote **** 1195
resolv-retry infinite
nobind
persist-key
persist-tun
ca ****
cert ****
key ****
ns-cert-type server
cipher BF-CBC
comp-lzo
verb 1
