shaneoh Hi all, I'm pretty mew to managing service like OpenVPN so please bear with me here. My company has been running an OpenVPN server for around a year now - no issues, works really well. We are at the stage where we would like to lock down our internal network so that only users connected on whitelisted IPs are able to connect - our router has this functionality. However I'm not sure how to do this for user connecting via our VPN. Firstly, I'm not clear on what someones IP address actually is when they are connected. Secondly I'm not clear on if those are randomly assigned every time they connect or static. I'm presuming there is a pool of addresses and if this is the case I'll be able to ad the pool to the whitelist, but I don't know how I can find that information and both Google and this forum haven't helped so far. If anyone has any ideas I'd be very grateful.
Traffic You can assign fixed IP addresses to VPN clients using --client-config-dir: HOWTO: Expanding the scope of the VPN to include additional machines You will probably want to read the entire HOWTO.
shaneoh Thanks for the link. It didn't seem relevant at first but it led me eventually but it led me to a page explaining how to assign a static IP. However...assigning a static IP to a user isn't going to work in our scenario, I don't think. What I need to do is assign a static IP to a MAC address. Does anyone know if this is possible?
