Set static IP with the same certificate authority

ducvanst

Hi everyone !
I have built the system to manage the large group of clients. So, I got an issue with my openVPN server. Because I have to manage many clients and assign static IP addresses for them (my customer does not not want to let server set dynamic IP addressses) but the system is large, and the clients is more than 10000. Therefore, I tried to create just one certificate authority to different config static IP addresses for all of them. I have researched google many times but I can not find the way to resolve it.
Can you help me ?
Thanks for reading my topic !

maikcat

hi there,

Because I have to manage many clients and assign static IP addresses for them

ok so far...

ut the system is large, and the clients is more than 10000

ok...(2)

I tried to create just one certificate authority to different config static IP addresses for all of them

not ok...

what do you exactly mean by "to different config static IP addresses for all of them" ?

what CA has to do with assigning vpn ip's to your clients? :?

you need to use ccd files with ifconfig-push command inside them to assign static ip PER CLIENT CERTIFICATE.

Michael.

ducvanst

Thanks Micheal.
I mean could a OpenVPN's certificate authority assign different static IP Address for all clients ? So, I don't have to set static IP Addresses manually for each client. OpenVPN Server makes a certificate file, and each client will use this file to set own static IP.
According to your tip, I have to set IP Address for each client and then I have to config for all clients like that, and it will take me too much time.

maikcat

I mean could a OpenVPN's certificate authority assign different static IP Address for all clients ?

i dont think that CA has anything to do with assigning ip addresses to clients...
ccd is the only way to go,

yes is a tedious job BUT you can create scripts to generate ccd files automatically 😉

Michael.

ducvanst

Very thanks Micheal. I appreciate it.