preack
Hi, I have a working vpn deploy with one server and multiple clients using preshared key, this way my server have 15 tun interfaces all in the subnet 10.8.0.xxx :
server1, server1.conf using key1 client1, client1.conf usinng key1
tun0 10.8.0.1 <--------------------------------------------------> tun0 10.8.0.2
server2, server2.conf using key2 client2, client2.conf using key2
tun1 10.8.0.3 <------------------------------------------------- > tun0 10.8.0.4
server3, server3.conf using key3 client3, client3.conf using key3
tun2 10.8.0.5 <-------------------------------------------------> tun0 10.8.0.6
And so on, all working.
I try to make the same implementation but with certs but I can't make it work, I have 2 conf files con the server but when I start the openvpn service the tun0 and tun1 have the same 1p 10.8.0.1 and on client 2 only ping the server, the client2 can't reach the server.
My conf files are:
On the server
server1.conf
port 1194
proto udp
dev tun
ca keys/ca.crt
cert keys/servidor.crt
key keys/servidor.key
dh keys/dh1024.key
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
route 10.8.0.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-tunnel1.log
log openvpn-tunnel1-status.log
verb 3
server2.conf
port 1195
proto udp
dev tun
ca keys/ca.crt
cert keys/servidor.crt
key keys/servidor.key
dh keys/dh1024.key
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
route 10.8.0.0 255.255.255.0
client-to-client
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-tunnel2.log
log openvpn-tunnel2-status.log
verb 3
Client 1
client1.conf
client
dev tun
proto udp
remote publicip-server 1194
nobind
persist-key
persist-tun
ca keys/ca.crt
cert keys/client1.crt
key keys/client1.key
comp-lzo
ver3
log openvpn-client1.conf
Client2
client2.conf
client
dev tun
proto udp
remote publicip-server 1195
nobind
persist-key
persist-tun
ca keys/ca.crt
cert keys/client2.crt
key keys/client2.key
comp-lzo
ver3
log openvpn-client1.conf
When I start the service on the server the tun0 and tun1 have the same ip, both clients can connect but one the first it's able to communicate with the server.
Thanks for ideas or help =)
