Currently I have 3 WAN IPs that I assign to users based on username/password and client-config-dir /etc/openvpn/ccd but the problem is users that are included in the client-config-dir cannot benefit from duplicate-cn. Is there anyway that I can still hand out all 3 public IPs and allow concurrent sessions?
Here is my config
local 198.51.100.1
port 1194 #- port
proto udp #- protocol
dev tun
tun-mtu 1500
fragment 1300
mssfix
duplicate-cn
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
plugin /usr/lib/openvpn/openvpn-auth-pam.so /etc/pam.d/login
client-cert-not-required
username-as-common-name
server 10.8.1.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 10 120
persist-key
persist-tun
status ./ovpnstatus.log 5
status-version 2
log ./openvpn-log.log
log-append ./openvpn-append-log.log
verb 3
comp-lzo
client-config-dir /etc/openvpn/ccd
route 10.8.2.0 255.255.255.0
route 10.8.3.0 255.255.255.0
example of ccd user
dave
ifconfig-push 10.8.3.5 10.8.3.6
