# OpenVPN adding unwanted default route -- how to fix without GUI **URL:** \ **Category:** Rocky Linux Help & Support\ **Created:** [October 3, 2023, 6:19pm UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466 "2023-10-03T18:19:51Z")\ **Posts on this page:** 7\ **Page:** 1
**Author:** ![Whoever](https://avatars.discourse-cdn.com/v4/letter/w/9de053/32.png) [@Whoever](https://forums.rockylinux.org/u/Whoever)\ **Post date:** [October 3, 2023, 6:19pm UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/1 "2023-10-03T18:19:51Z")
I am trying to get OpenVPN running on Rocky Linux 8. It will connect and work, but the problem I see is that it adds a new default route via the tun interface. I don’t want this route. I have found instructions on how to disable this via the Network Manager Applet, but this is on a minimal webserver with no X. I have tried nmtui, but the VPN connection doesn’t show up (it does show up in “nmcli show”). How can I disable this setting of a new default route? ---
**Author:** ![Whoever](https://avatars.discourse-cdn.com/v4/letter/w/9de053/32.png) [@Whoever](https://forums.rockylinux.org/u/Whoever)\ **Post date:** [October 4, 2023, 2:54am UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/2 "2023-10-04T02:54:49Z")
Well, I found a solution to this problem: nmcli con modify untrusted ipv4.never-default true where “untrusted” is the name of the connection. ---
**Author:** ![jlehtone](https://avatars.discourse-cdn.com/v4/letter/j/e9a140/32.png) [@jlehtone](https://forums.rockylinux.org/u/jlehtone)\ **Post date:** [October 4, 2023, 7:31am UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/3 "2023-10-04T07:31:59Z")
I’m a bit confused. Did you say that you can’t see the connection with `nmcli con show` (I presume), yet you were able to refer to that connection? (One can use both name and UUID to refer to connection.) * * * Yes, the `ipv4.never-default ` (and `ipv6.never-default`) affect whether NetworkManager does use the DHCP option “routers” to construct a default route (aka ‘gateway’). It is a positive surprise that NM can use that with OpenVPN too (as OpenVPN server usually hands config for the client). Intregration that converts nm-settings into openvpn settings? The last time I’ve used openvpn, it was without NM. My openvpn server did not push “default-route” either. ---
**Author:** ![Whoever](https://avatars.discourse-cdn.com/v4/letter/w/9de053/32.png) [@Whoever](https://forums.rockylinux.org/u/Whoever)\ **Post date:** [October 4, 2023, 4:47pm UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/4 "2023-10-04T16:47:31Z")
With NetworkManager-openvpn installed, one can import an OpenVPN config file into Network Manager. My VPN server is not pushing the unwanted default route – it’s NetworkManager that is inventing it. The latest OpenVPN packages for Rocky 8 don’t include any service files – the only way I found to start it, other than a basic script, is to use NetworkManager. The results of “nmcli con show” are interesting: # nmcli con show NAME UUID TYPE DEVICE untrusted 9b8215f6-a0ee-4f0c-b9c5-e6bfccd67489 vpn ens3 ens3 47118d83-e869-43bc-80b1-6a1a160f2b13 ethernet ens3 tun0 6e39e2c0-bd5b-4e47-aab5-a2c15a364160 tun tun0 tun0 6b5ba2be-f13c-476a-81d6-efbc16795f7b tun – I don’t know where the second “tun0” has come from. It remains there even if I shut down the “untrusted” VPN connection. The new problem is that the “untrusted” VPN connection doesn’t come up automatically after a reboot, despite it being configured to do so: # nmcli con show untrusted | grep auto connection.autoconnect: yes connection.autoconnect-priority: 0 connection.autoconnect-retries: -1 (default) connection.autoconnect-slaves: -1 (default) ipv4.method: auto ipv4.ignore-auto-routes: no ipv4.ignore-auto-dns: no ipv6.method: auto ipv6.ignore-auto-routes: no ipv6.ignore-auto-dns: no ipv6.mtu: auto I wonder if I need to also set one of the “tun0” interfaces to also come up automatically? ---
**Author:** ![wintpe](https://avatars.discourse-cdn.com/v4/letter/w/e47774/32.png) [@wintpe](https://forums.rockylinux.org/u/wintpe)\ **Post date:** [October 6, 2023, 10:48am UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/5 "2023-10-06T10:48:57Z")
re rocky 8 does not include any service files. the method I use on rocky 8 to start an openvpn server is: systemctl enable openvpn-server@server.service systemctl start openvpn-server@server.service where the config file is /etc/openvpn/server/server.conf this allows multiple openvpn servers to run on one server. regards peter ---
**Author:** ![Whoever](https://avatars.discourse-cdn.com/v4/letter/w/9de053/32.png) [@Whoever](https://forums.rockylinux.org/u/Whoever)\ **Post date:** [October 6, 2023, 11:01pm UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/6 "2023-10-06T23:01:44Z")
Replacing “server” with “client” in your instructions, it all worked. Thanks! ---
**Author:** ![system](https://us1.discourse-cdn.com/flex020/uploads/rockylinux/original/1X/91b7219eec10e30013422e4df76c1d898711a5d5.svg) [@system](https://forums.rockylinux.org/u/system)\ **Post date:** [December 5, 2023, 11:02pm UTC](https://forums.rockylinux.org/t/openvpn-adding-unwanted-default-route-how-to-fix-without-gui/11466/7 "2023-12-05T23:02:30Z")
This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.