Thank you so much, I was trying:
net-device-up IFACE=tun0 and it was failing, because the device didn't exist when checked.