Hi, I have been unsuccessfully trying to configure the following: I have 3 routers all running Tomato 1.28 (K26 USB vpn3.6) They have distinct subnets of 192.168.0.x, 192.168.1.x and 192.168.2.x. I wish to configure a VPN server on 192.168.0.1 in UDP/TAP/TLS mode that the other two routers can connect and bi-directonally route the subnets. If I understand correctly, this will require me to bridge the networks (using push commands?) I should mention at this point that I am reluctant to go down the TUN route, although I have seen it mentioned on several occasions, as the majority of connections to the VPN server on 192.168.0.1 will be from windows clients who will benefit the visibility of samba shares from being directly attached to the network. Currently the VPN server is configured as follows: Code: Interface: TAP Protocol: UDP Port: 443 Firewall: Automatic Authorization: TLS HMAC: Disabled Client address pool: DHCP Direct clients to redirect: NO Respond to DNS: No Encryption cipher: Default Compresson: Adaptive TLS Regeneration: -1 Manage Client-Specific Options: YES Allow Client<->Client: YES Allow Only These Clients: NO In the enable table I have certificate CNs for the two router clients as follows: Code: TICK Router1 192.168.0.0 255.255.255.0 TICK TICK Router2 192.168.0.0 255.255.255.0 TICK On the client routers i have: Code: Interface: TAP Protocol: UDP Server Address/Port: my.hostname.com 433 Firewall: Automatic Authorization Mode: TLS Extra HMAC: Disabled Server on same subnet: NO Create NAT on tunnel: currently NO, have tried YES. The windows clients running OpenVPN Gui connect fine to the server with no problems, However the routers connect and are shown in the status but I am unable to ping from client to server or vice versa. I would very much appreciate any assistance you could give me.