Greetings.
I have working VPN servers, version 2.1 and 2.2.
Users are authenticated using username and password, not certificates.
But, when a user logs in using two machines, the user gets the same IP address assigned.
Goal: Every VPN connection, even when it is the same common name / user-pass combination, should receive a different internal IP address from the address pool.
How to do this?
Is there maybe an option in our current config, which prevents this behavior?
Server config:
local $ip
server 10.0.0.0 255.0.0.0
max-clients 20
connect-freq 10 60
client-config-dir vpn.openvpn.clientconfigs
tls-auth easy-rsa/keys/tls-auth.key 0
tls-server
dev tap
push redirect-gateway def1
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DISABLE-NBT"
dh easy-rsa/keys/dh2048.pem
ca easy-rsa/keys/ca.crt
cert easy-rsa/keys/server.crt
key easy-rsa/keys/server.key
client-cert-not-required
username-as-common-name
auth-user-pass-verify openvpn_auth.sh via-file
tmp-dir /dev/shm
client-connect openvpn_connect.sh
client-disconnect openvpn_disconnect.sh
script-security 2
status /dev/shm/openvpn.status.raw 30
status-version 2
keepalive 10 30
ping-timer-rem
reneg-sec 3600
cipher AES-256-CBC
comp-lzo
float
verb 1
