Does it make sense/is it legal to have the following directive in a CCD config?
Code:
ifconfig-pool 10.88.5.1 10.88.5.254
this is not allowed - openvpn only has a single pool of dynamic address.
If not, is there another way to accomplish this?
you could write a 'client-connect' script which , based on the username, assigns an IP address from a pool; you'd have to maintain this pool yourself. A quick&dirty method would be to set up a directory containing emtpy files, where the name of the file is equal to the IP address; assigning an address from the pool then simply means creating a symlink
username -> ip
Cleaning up an address means removing the symlink; the advantage of this is that an 'ln -fs' operation is atomic - that is, it's VERY difficult to get two names assigned to the same IP address.
