cat /etc/openvpn/server.conf

local 192.168.1.60
dev tun
proto tcp
port 1194
ca /etc/openvpn/easy-rsa/pki/ca.crt
cert /etc/openvpn/easy-rsa/pki/issued/server_xxxxxxxx.crt
key /etc/openvpn/easy-rsa/pki/private/server_xxxxxxx.key
dh /etc/openvpn/easy-rsa/pki/dhxxxx.pem
topology subnet
server 10.8.0.0 255.255.255.0
# server and remote endpoints
ifconfig 10.8.0.1 10.8.0.2
# Add route to Client routing table for the OpenVPN Server
push "route 10.8.0.0 255.255.255.0"
# your local subnet
push "route 192.168.1.0 255.255.255.0"
# Set your primary domain name server address for clients
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
# Override the Client default gateway by using 0.0.0.0/1 and
# 128.0.0.0/1 rather than 0.0.0.0/0. This has the benefit of
# overriding but not wiping out the original default gateway.
push "redirect-gateway def1"
client-to-client
keepalive 10 120
remote-cert-tls client
tls-version-min 1.2
tls-auth /etc/openvpn/easy-rsa/pki/ta.key 0
cipher AES-256-CBC
auth SHA256
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
crl-verify /etc/openvpn/crl.pem
status /var/log/openvpn-status.log 20
status-version 3
log /var/log/openvpn.log
verb 1
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
# Generated for use by PiVPN.io

root@xxxxx:~# ip route
default via 192.168.1.1 dev eth0
default via 192.168.1.1 dev eth0  metric 202
10.8.0.0/24 dev tun0  proto kernel  scope link  src 10.8.0.1
192.168.1.0/24 dev eth0  proto kernel  scope link  src 192.168.1.60  metric 202
192.168.1.60 via 127.0.0.1 dev lo  metric 202
192.168.42.0/24 dev wlan0  proto kernel  scope link  src 192.168.42.1

root@Linksys1900ACS:/# cat /etc/config/openvpn

config openvpn 'myvpn'
        option enabled '1'
        option verb '3'
        option proto 'udp'
        option port '1194'
        option dev 'tap'
        option mode 'server'
        option tls_server '1'
        list push 'route-gateway dhcp'
        list push 'redirect-gateway def1'
        option keepalive '10 120'
        option ca '/etc/openvpn/ca.crt'
        option cert '/etc/openvpn/my-server.crt'
        option key '/etc/openvpn/my-server.key'
        option dh '/etc/openvpn/dh2048.pem'

root@Linksys1900ACS:/# route
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         254.pool85-56-2 0.0.0.0         UG    0      0        0 eth0.832
10.8.0.0        192.168.1.60    255.255.255.255 UGH   0      0        0 br-lan
85.56.216.0     *               255.255.254.0   U     0      0        0 eth0.832
85.56.217.254   *               255.255.255.255 UH    0      0        0 eth0.832
192.168.1.0     *               255.255.255.0   U     0      0        0 br-lan

oot@edited1:~# tail -f /var/log/openvpn.log
Fri Feb  9 12:08:21 2018 TCP connection established with [AF_INET]xxx.xxx.xx.xxx:42971
Fri Feb  9 12:08:25 2018 xxx.xxx.xx.xxx:42971 [Edited_user] Peer Connection Initiated with [AF_INET]xxx.xxx.xx.xxx:42971
Fri Feb  9 12:08:25 2018 Edited_user/xxx.xxx.xx.xxx:42971 MULTI_sva: pool returned IPv4=10.8.0.6, IPv6=(Not enabled)
Fri Feb  9 12:08:26 2018 Edited_user/xxx.xxx.xx.xxx:42971 send_push_reply(): safe_cap=940
Fri Feb  9 12:21:50 2018 TCP connection established with [AF_INET]xx.xxx.xxx.xx:33430
Fri Feb  9 12:21:52 2018 xx.xxx.xxx.xx:33430 Connection reset, restarting [0]
Fri Feb  9 12:24:36 2018 TCP connection established with [AF_INET]xx.xxx.xxx.xx:57420
Fri Feb  9 12:24:39 2018 xx.xxx.xxx.xx:57420 [EditedName] Peer Connection Initiated with [AF_INET]xx.xxx.xxx.xx:57420
Fri Feb  9 12:24:39 2018 EditedName/xx.xxx.xxx.xx:57420 MULTI_sva: pool returned IPv4=10.8.0.10, IPv6=(Not enabled)
Fri Feb  9 12:24:41 2018 EditedName/xx.xx.xx.xx:57420 send_push_reply(): safe_cap=940
^C
root@edited1:~# curl 10.8.0.6:8000
^C
root@edited1:~# curl 10.8.0.6:8000
^C
root@edited1:~# telnet 10.8.0.6 8000
Trying 10.8.0.6...
^C
root@edited1:~# telnet 10.8.0.10 27
Trying 10.8.0.10...
^C
root@edited1:~# telnet 10.8.0.10 22
Trying 10.8.0.10...