OpenVPN Support Forum

This is regarding the limits for "excluderoutes" in openvpn xml profile.
Do we have any limit on the greatest allowed number of routes of "excluderoutes"?


VPN Gateway: VPN client for OpenVPN protocol P2S connections: Azure AD authentication | Microsoft Docs
https://docs.microsoft.com/en-us/azure/ ... vpn-client

How do I block (exclude) routes from the VPN client?
You can modify the downloaded profile XML file and add the <excluderoutes><route><destination><mask> </destination></mask></route></excluderoutes> tags.
<azvpnprofile>
<clientconfig>

<excluderoutes>
<route>
<destination>x.x.x.x</destination><mask>24</mask>
</route>
</excluderoutes>

</clientconfig>
</azvpnprofile>

Did you figure this out? I only have one excludedroute when I export my VPN configuration after importing one with about 10

Probably going to have to set up an additional vpn gateway in Azure just for P2S so my S2S routes don't get distributed, but it seems unnecessary per the documentation you linked.

Hello phletch,

I would like to help you but as far as I know nothing in OpenVPN2 or OpenVPN3 uses XML. This sounds like some kind of a custom solution for Amazon's AWS implementation of an OpenVPN client configuration? You might want to check with Amazon documentation or support about this one.

Kind regards,
Johan