Nested subnets for different user

zigli

--iroute network [netmask]
Generate an internal route to a specific client. The netmask parameter, if omitted, defaults to 255.255.255.255.This directive can be used to route a fixed subnet from the server to a particular client, regardless of where the client is connecting from.

And a question...
Can i define nested networks for two users in --client-config-dir ?
iroute 10.10.5.4 255.255.255.252 => first user
iroute 10.10.5.0 255.255.255.0 => second user

maikcat

hi there,

AFAIK yes you can but you must also add the necessary route
directives inside server conf as well..

Michael.

zigli

maikcat wrotehi there,

AFAIK yes you can but you must also add the necessary route
directives inside server conf as well..

Michael.

I've eximined http://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html
but did not find any suitable option.

maikcat

you need to add the route directive inside server config

f.e you have one client (cert name test01 ip subnet 192.168.1.0)
you create a ccd file named test01 with the contents:

iroute 192.168.1.0 255.255.255.0

also you add inside server config this:

route 192.168.1.0 255.255.255.0

and you are done...

Michael.