ronan cunniffe lpetjcunniffenet michael watterson wrote ronan cunniffe wrote yes single host client side cant reach ip address used linuxwindows nt40 server win2k advanced server vpn quite happy vpn address space serverlan client use either whatever local gateway gateway defined vpn server unless requirement access internet via remote server using remote servers gateway bad idea may effectively eating cap two isp connections downloadinguploading actual public internet traffic logged anonymised client ip would use remote gateway ive never add routes manually server client end vpn windows linux networks distinct client side single machine youll never aforementioned cant reach address problem general case connecting two networks would ronan single client actually wan port nat firewall box work long natted boxes different subnet end vpn suppose theyre subnet eg 1921680024 local machine 19216801 trying send traffic another local remote machine called 19216802 two routes subnet direct nat gateway one work use single machine vpn brought older route destroyed correct direct route 19216804 19216804 gone might notice problem works end new vpn instance requires new route anyway single host endpoint specific general network side means used preference according rules routing rules tested specific first first matching rule used words 19216801 want send 19216805 routing table 19216800 2552552550 u eth0 19216805 255255255255 uh tun0 1921680254 0000 ug eth0 traffic go tun0 255255255255 specific 2552552550 ronan fri 08 aug 2008 020324 0000 ilug openvpn problem