OpenVPN Support Forum

Our OpenVPN AS server setup is nearly finished. I have 20 licensed users, RADIUS integration for RBAC, two-factor authentication, routing is good and all traffic is controlled with a firewall for more granular control. I'm nearly ready to unveil this to my users, but it occurs to me that any user can just repeat the steps we've laid out for their work computers on their home PCs and they would be able to connect from devices that haven't been vetted by our team, and may not meet minimum security requirements.

Is there any mechanism that would prevent this?

the post auth script can check their adapter's MAC address. Their example script should give you a good starting point.

It's better if you contact us through the support ticket system and request the latest document that describes how to do this, it has more information. It's called the Post-auth MAC address script.