As suggested by @phildremi here: #132 (comment)
This is probably excessive, but a more visual feedback could be achieved with something like
# 'Send secret' payload
ping -c1 192.168.21.2 -p 736563726574
and then inspecting the payload with tcpdump to make sure the VPN works as expected.
As suggested by @phildremi here: #132 (comment)