I'm configuring my first OpenVPN server (into a Windows box), and I'm very confused about the possibility to have a max IPs allocation for 63 clients only. The problem is, my server.conf have this line: [code]server 10.8.0.0 255.255.0.0[/code] I was using 255.255.255.0, but because of this doubt I change to 255.255.0.0, but on logs I always get netmask: '255.255.255.252', so I still confused if this change solve my problem. I'm using net30 topology, so each client occupy 4 IPs in the server, if I have only 254 IPs for clients, this is 63 clients maximum. I'm using [code]max-clients 50[/code], but let's suppose I have in one day a total of 63 clients in this server, so I reached the limit of IPs allocation. When I get the 64º client, what will happen? I believe that from the 64º to all next to him, will receive connection error, only the first 63 will have IP allocation successfully done. Am I correct or OpenVPN will allocate all the new clients in old IPs from clients that are not currently connected? What's the solution to have space to allocate IPs for indefinitely clients? Thank you.

[quote="backb0ne"]I'm very confused about the possibility to have a max IPs allocation for 63 clients only[/quote]See [b]--topology[/b] in [url=https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage]The Manual v23x[/url] For further help: Please see the [b][color=#A40000]Forum rules[/color][/b] (top of page)

[quote="Traffic"][quote="backb0ne"]I'm very confused about the possibility to have a max IPs allocation for 63 clients only[/quote]See [b]--topology[/b] in [url=https://community.openvpn.net/openvpn/wiki/Openvpn23ManPage]The Manual v23x[/url] For further help: Please see the [b][color=#A40000]Forum rules[/color][/b] (top of page)[/quote] Hi. Thank you for answer, but I already saw topology in manual, and looks like net30 is the best for me. But how to configure it to accept more than 63 clients?

[quote="backb0ne"]It's working, but I need to know: is it correct?[/quote]No. Replace:[quote="backb0ne"]ifconfig-pool 10.8.0.4 10.8.254.254[/quote]with[code]ifconfig-pool 10.8.0.4 10.8.255.254[/code] [quote="backb0ne"]how many IP addresses I can allocate[/quote]Provided you do not create any network conflicts, you [i]can [/i]allocate 4,096,575 client net30 subnets. With your current setup, I expect the most you will be able to allocate is 16,065 client net30 subnets.

OpenVPN maximum 63 clients?

backb0ne

I'm configuring my first OpenVPN server (into a Windows box), and I'm very confused about the possibility to have a max IPs allocation for 63 clients only.
The problem is, my server.conf have this line:

server 10.8.0.0 255.255.0.0

I was using 255.255.255.0, but because of this doubt I change to 255.255.0.0, but on logs I always get netmask: '255.255.255.252', so I still confused if this change solve my problem.
I'm using net30 topology, so each client occupy 4 IPs in the server, if I have only 254 IPs for clients, this is 63 clients maximum.
I'm using

max-clients 50

, but let's suppose I have in one day a total of 63 clients in this server, so I reached the limit of IPs allocation. When I get the 64º client, what will happen? I believe that from the 64º to all next to him, will receive connection error, only the first 63 will have IP allocation successfully done. Am I correct or OpenVPN will allocate all the new clients in old IPs from clients that are not currently connected? What's the solution to have space to allocate IPs for indefinitely clients?
Thank you.

Traffic

backb0ne wroteI'm very confused about the possibility to have a max IPs allocation for 63 clients only

See --topology in The Manual v23x

For further help: Please see the Forum rules (top of page)

backb0ne

Traffic wrote
backb0ne wroteI'm very confused about the possibility to have a max IPs allocation for 63 clients only
See --topology in The Manual v23x

For further help: Please see the Forum rules (top of page)

Hi. Thank you for answer, but I already saw topology in manual, and looks like net30 is the best for me. But how to configure it to accept more than 63 clients?

backb0ne

I'm trying to manually configure the server (omitting the --server command), so far I got this server.ovpn file:

local REMOTEIPADDR
mode server
port 1194
dev tun
dev-node VPN
tls-server
topology net30
ifconfig 10.8.0.1 10.8.0.2
ifconfig-pool 10.8.0.4 10.8.254.254
route 10.8.0.0 255.255.0.0
push "route 10.8.0.1"
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
comp-lzo
tls-server
tls-auth keys/shared.key 0
ca keys/ca.crt
cert keys/server.crt
key keys/server.key
dh keys/dh4096.pem
keepalive 10 60
max-clients 50
cipher AES-256-CBC
script-security 2
tls-verify "C:\\Manager\\RevokerMgr.exe"
log-append keys/logs.txt

It's working, but I need to know: is it correct? And how many IP addresses I can allocate right there?

Traffic

backb0ne wroteIt's working, but I need to know: is it correct?

No.

Replace:

backb0ne wroteifconfig-pool 10.8.0.4 10.8.254.254

with

ifconfig-pool 10.8.0.4 10.8.255.254

backb0ne wrotehow many IP addresses I can allocate

Provided you do not create any network conflicts, you can allocate 4,096,575 client net30 subnets.

With your current setup, I expect the most you will be able to allocate is 16,065 client net30 subnets.

backb0ne

Thank you! Problem solved 🙂