Hello. I need the same info.

@TRNX
Please read para I ( it explains recursive, provides rules of thumb, and has examples )
viewtopic.php?t=182373

Thank you very much!
Your guide is very usefull

I thought about it, but I don't know the right answer again. Because routes which left are dynamic routes which target-scope isn't specified and their scope is 10. So their scope is still = target-scope of other routes. (To make it easier for me to understand I disabled the second default route for ...

Once again, step by step: 1) A route 1 in your config needs a nexthop. 2) It has target-scope=10 3) It then searches the nexthop among the routes that has their scope<=10 4) It finds route 2 that has needed dst-address and scope=10 5) scope=10 (of route 2) <= target-scope=10 (of route 1) ---> route...

Hello. I have the same problem. Can´t authenticate OpenVPN via RADIUS if I didn´t allow PAP in NPS :/ If I allow using PAP everything works perfect.
Still no solution?