override default route on client from server

This forum is for admins who are looking to build or expand their OpenVPN setup.
Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
OpenVpn Newbie
Posts: 1
Joined: Sun Nov 10, 2019 4:32 pm

override default route on client from server

Post by doubled » Sun Nov 10, 2019 4:36 pm


Maybe someone has an idea how to achieve this.
We have deployed a OpenVPN client configuration on ~400 clients.
This configuration also includes "redirect-gateway def1", so they are using the openvpn server as default gateway.
Now what we would like to do is to override this option only for some clients on the server side.
I know we could also deploy a different client configuration for those clients, but it would be quite easier if this can be achieved over the server.
Any hints if this is possible?


OpenVPN Power User
Posts: 154
Joined: Tue May 01, 2012 9:30 pm

Re: override default route on client from server

Post by 300000 » Thu Nov 14, 2019 11:37 pm

if you want to override some client from server just do as

server will know which client connect to it by comom name in certificate so basic you need to find out certificate of the client you want to put specific of routing like this.

for example you got a client its common name certificate is joad.

make an file withou extension name joad , open the file and add like this,place this file in cdd folder and add full path to the server config
client-config-dir "/tmp/openvpn/ccd"

push "route net_gateway"
push "route net_gateway"
push "route net_gateway"
push "route net_gateway "

when the client connect to server , server will check its name in cdd folder and load all infor in the file jonh and apply to that client.so when client connect it use client getaway and dont route all through server , you can place as many as file in ccd folder as you want

User avatar
OpenVPN Protagonist
Posts: 7162
Joined: Fri Jun 03, 2016 1:17 pm

Re: override default route on client from server

Post by TinCanTech » Fri Nov 15, 2019 12:13 am

Or use --push-remove in the client.

See --push-remove in the manual.

Post Reply