OpenVPN – Unidentified Network issue

James Young · May 30, 2014

Discovered a little wrinkle in Windows 7’s Network Identification feature.  If you’re pushing an OpenVPN tunnel to a machine and not substituting the default gateway (because, for example, you want a split tunnel) with the VPN’s gateway, then Windows just consistently won’t identify the network, which means you’re stuck with the “Public” firewall profile.

Fortunately the solution’s pretty easy.  In the client config directives for your client, you define a new default route with a very high metric pointing to the peer address for the client, eg;

push "route 500"

So now, when that client connects, it will have the IP address and a peer address of .  We define a new default route going to with a very high metric.  This ensures that this route doesn’t get used unless the real default route is broken.

Connect up, and voila!  Windows identifies the network, and you can give it a name and change its type from ‘Public’ to ‘Home’.

Twitter, Facebook