$ 0 0 Definitely add route-nopull to your VPN config.Remove source clause from NAT rule 5000.You didn't define table 1 to interface-route 0.0.0.0/0 to vtun0.