diff --git a/salt/vpn/openvpn.conf b/salt/vpn/openvpn.conf
index 15288fe..d01ec95 100644
--- a/salt/vpn/openvpn.conf
+++ b/salt/vpn/openvpn.conf
@@ -39,7 +39,6 @@ persist-tun
 reneg-sec 0
 
 remote-cert-tls server
-auth-user-pass
 
 keepalive 10 30
 cipher AES-256-CBC
diff --git a/salt/vpn/openvpn.sls b/salt/vpn/openvpn.sls
index c7d460c..e8bb0be 100644
--- a/salt/vpn/openvpn.sls
+++ b/salt/vpn/openvpn.sls
@@ -9,7 +9,7 @@ hostroutes-{{ name }}:
     - routes:
 {%- for a in salt.dnsutil.A(conf['server']) %}
       - ipaddr: {{ a }}
-        netmask: 255.255.224.0
+        netmask: 255.255.255.255
         gateway: {{ pillar['hosts-inet']['core']['upstream1'] }}
 {%- endfor %}