OpenVPN assigned same ip address to multiple users

acrisius

Hello Guys,

I do need some help here. I am new to OpenVPN and i just able to deploy and running perfectly fine.
But the problem occurred when there are few users connecting to same OpenVPN. What I had noticed
all the clients were assigned to same ip address and it ended up connection halt.
So, I need some advise on my current server configuration, perhaps can point out what's the issue behind of this?

port 123 #- port
proto udp #- protocol
dev tun
tun-mtu 1300
mssfix 1450
reneg-sec 172800
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/server.crt
key /etc/openvpn/easy-rsa/2.0/keys/server.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
client-cert-not-required
username-as-common-name
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
keepalive 5 30
engine dynamic
comp-lzo adaptive
persist-key
persist-tun
status 1194.log
verb 1
cipher none
resolv-retry infinite
fast-io
plugin /etc/openvpn/openvpn-auth-pam.so /etc/pam.d/login

Is that my configuration is only meant for one user connect at one time?

Thanks for helping me!

JoshC

acrisius wroteWhat I had noticed
all the clients were assigned to same ip address and it ended up connection halt.

The server config you have looks fine. Increasing the verbosity to level 4 will give you more info from the server, including the IP it's handing to your client; look for the PUSH_REPLY message. If you're still having issues, include the client config and server logs.

acrisius

Hey Josh, thanks for replying. I still failed to rectify the issue.

A part of Client's log:

Sat Nov 09 00:53:39 2013 us=371267 PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 8.8.8.8,dhcp-option DNS 8.8.4.4,route 10.8.0.1,topology net30,ping 5,ping-restart 30,ifconfig 10.8.0.6 10.8.0.5'
Sat Nov 09 00:53:39 2013 us=371267 OPTIONS IMPORT: timers and/or timeouts modified
Sat Nov 09 00:53:39 2013 us=371267 OPTIONS IMPORT: --ifconfig/up options modified
Sat Nov 09 00:53:39 2013 us=371267 OPTIONS IMPORT: route options modified
Sat Nov 09 00:53:39 2013 us=371267 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Sat Nov 09 00:53:39 2013 us=431270 do_ifconfig, tt->ipv6=0, tt->did_ifconfig_ipv6_setup=0
Sat Nov 09 00:53:39 2013 us=431270 MANAGEMENT: >STATE:1383929619,ASSIGN_IP,,10.8.0.6,
Sat Nov 09 00:53:39 2013 us=431270 open_tun, tt->ipv6=0
Sat Nov 09 00:53:39 2013 us=436271 TAP-WIN32 device [OpenVPN] opened: \\.\Global\{C4F8DCEA-B3BB-421C-A73D-FBE936907565}.tap
Sat Nov 09 00:53:39 2013 us=437271 TAP-Windows Driver Version 9.9

Client's config:

client
dev tun
proto udp
remote 116.X.X.X 123
resolv-retry infinite
nobind
fast-io
persist-tun
persist-key
engine dynamic
auth-user-pass account.key
auth-nocache
cipher none
ns-cert-type server
ca ca.crt
comp-lzo adaptive
mssfix 1450
reneg-sec 172800
verb 4
explicit-exit-notify 2

As your information, all the clients were sharing the same cert. Is that a problem?