# Network Links

Network links known as a routed LAN or iroute in OpenVPN allow routing a local network from a Pritunl client to the VPN server. In the diagram below the EdgeRouter will run an OpenVPN client connected to the Pritunl Server and to local network `10.100.0.0/16` will be routed to the VPN server. The devices on the VPN network `192.168.230.0/24` will have access to the devices on the EdgeRouter network `10.100.0.0/16`.

If you intend on having devices on the Pritunl servers network `10.150.0.0/16` an IPsec link should be used instead. If a network link is used you will need to add the `10.150.0.0/16` network to the VPN server routes and disable NAT. Then either use VPC route advertisement or manually create a static route on the Pritunl servers network to `192.168.230.0/24` and `10.100.0.0/16` with the Pritunl server `10.150.30.189/16` as the next-hop.

![](https://1783284711-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhDA4eusSNQcv5QfappvI%2Fuploads%2FZYjCuqptVDNpSFTLZJtM%2Fnetwork_links0.png?alt=media\&token=094b42ba-59af-4499-8179-ffda30ac2ab0)

First create a user for the router that will be connecting to the VPN server, in this example an EdgeRouter. Set the *Network Link* field to local network that will be routed through the user. For this example the network `10.100.0.0/16` will be used.

![](https://1783284711-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhDA4eusSNQcv5QfappvI%2Fuploads%2FI39Rp1DEXc1HgXb055Ny%2Fnetwork_links1.png?alt=media\&token=8c26dd73-300d-45e8-8c10-0d35bf8af34b)

Once the user is created and attached to the VPN server you will need to configure the VPN client. Refer to the [**Ubiquiti EdgeRouter**](https://docs.pritunl.com/kb/vpn/tutorials/ubiquiti-edgerouter-tutorial) for using the Pritunl plugin.

In this example the VPN client will be running on the router of the `10.100.0.0/16` network, the required routes will be automatically created when the router connects to the VPN server. If a VPN client is used behind the router you will need to manually create a static route. The static route will route the VPN network `192.168.230.0/24` using the VPN clients local address `10.100.0.120/16` as the destination. Refer to the router documentation on adding static routes.

After the router has been configured the server should look similar to the example below, showing the network link in the routes and the EdgeRouter user online.

![](https://1783284711-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FhDA4eusSNQcv5QfappvI%2Fuploads%2FBs5PTZj1yJX0wg0URIPC%2Fnetwork_links2.png?alt=media\&token=2afc2fd8-e95f-46f9-bccd-8ae46ddc357c)

Once done any users connected to the VPN server will have access to devices on the `10.100.0.0/16` network and devices on the `10.100.0.0/16` network will also have access to the VPN clients.