hi,
I had some issues with OpenVPN Connect client not working in terms of split tunnel routing which I discussed here;
https://forum.vyos.io/t/openvpn-split-tunnel-routing/12656/9
The issue was that the file; /run/openvpn/vtun0.conf that gets generated was generating client routing lines like;
push "route 10.0.10.0 255.255.255.0 10.10.0.1 0"
when for compatibility with OpenVPN Connect client (and possibly other OpenVPN clients, it needs to generate lines in the format of
push "route 10.0.10.0 255.255.255.0 vpn_gateway 0"
Without the change OpenVPN Connect Client fails to process the routes at connect time and it results in message such as;
exception parsing IPv4 route: [route] [10.0.10.0] [255.255.255.0] [10.10.0.1][0]: tun_prop_route_error: route destinations other than vpn_gateway or net_gateway are not supported
As discussed in the forum post, the solution is to modify line 82 of /usr/share/vyos/templates/openvpn/server.conf.j2
from;
push "route {{ route | address_from_cidr }} {{ route | netmask_from_cidr }} {{ subnet | first_host_address ~ ' ' ~ route_config.metric if route_config.metric is vyos_defined }}"
to;
push "route {{ route | address_from_cidr }} {{ route | netmask_from_cidr }} {{ 'vpn_gateway' ~ ' ' ~ route_config.metric if route_config.metric is vyos_defined }}"
The proposed change doesn't impact the behavior of OpenVPN Community client or Tunnelblick on the Mac and that works regardless.
thanks.