> bring the interfaces up > start dhcp client (if not triggered directly from the interfaces) > start openvpn
That is a misconfiguration in my book. The only correct configuration is when the dhcp client is triggered from the interface. After all, openvpn may take half an hour to get the connection and it may lose the connection at some point and reconnect to another openvpn server (via round-robin DNS, for example) which might require a reconfiguration on the dhcp side. Of course, the correct result can be obtained in various ways: - let openvpn run scripts to start&stop the dhcp client. - use ifplugd (assuming it works with openvpn, which I haven't checked). - use a dhcp client which internally does what ifplugd does (don't know which ones that would be). Stefan