Hi Jason,

On 2015-06-02 at 22:05 Jason Haar wrote:

> In this case using the openvpn tunnel as the default gw should have
> solved the problem - but normal people can't figure that out - so I'd
> like to solve it dynamically at the server end. However, to do that, the
> server would need to know in advance the routing table of the client -
> so that it could do something like "if 10.anything is local, then
> disable split tunnel and push all traffic through openvpn; else do split
> tunnel".

AFAIK, this is not possible, but you have options from my pov:

(1) Deploy 2 OpenVPN configurations to your users - one for split
    tunnel and one without (redirect-gw).

(2) For split tunneling push two routes to the clients instead 10/8:
    10.0.0.0/9 and 10.128.0.0/9
    These two routes have higher precedence than the conflicting
    10/8 hotel route.

HTH,
Mathias.


------------------------------------------------------------------------------
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to