Clustering

simplym

Hello,

I currently have the following setup. The vpn public interface sits on the firewall, and the router does port mapping to my openvpnas server. Since the firewall is port mapping via ip, does openvpn support ip takeover? I'm unclear on how to setup HA with my current setup. I'm not sure if the link below will work.
Any assistance is appreciated.

https://docs.openvpn.net/how-to-tutorialsguides/administration/active-active-high-availability-setup-for-openvpn-access-server/

The Johan

That guide is a bad alternative for high availability, and it even notes that some things aren't working on that. In a pinch it might solve your problem if you can't use the built-in failover solution.

The built-in failover solution that is integrated into the Access Server works as follows;

Primary node: Private IP 1
Secondary node: Private IP 2

They both share a private virtual IP 3. The primary node will use this, until it crashes and the secondary takes over. Then the secondary node takes over private virtual IP 3.

So no matter which of the nodes is online, they can always be reached at that same private virtual IP 3.

Then you just forward outside traffic to that private IP use a port forward or NAT forwarding rule, and you're done. Ports TCP 443, 943, and UDP 1194 should be forwarded.

Good luck.