We are currently running Openvpn server 2.3.8. We want to allow clients connecting to the server to receive the same IPs each time. Essentially have the server hand out static IPs based on the key names.
I have been reading the following
https://community.openvpn.net/openvpn/wiki/Concepts-Addressing. And it says we should stay away from net30 and use the subnet topology. I'm assuming we are using net30 since its version 2.3.8 and we did not explicitly state topology subnet in the config. I was also wondering if we can use the same keys? Or will these need to be re-keyed using pkcs12. The example configs show tls-server is needed as an option.
Current server.conf:
user root
port 1194
proto udp
dev tap6
ca /usr/local/etc/openvpn/ca.crt
cert /usr/local/etc/openvpn/server.crt
key /usr/local/etc/openvpn/server.key
dh /usr/local/etc/openvpn/dh2048.pem
server 10.254.0.8 255.255.255.248
#push "redirect-gateway def1 bypass-dhcp"
#push "route-gateway 10.254.0.9"
push "route 10.72.0.0 255.255.192.0 10.254.0.9"
push "route 10.73.0.0 255.255.192.0 10.254.0.9"
push "route 10.150.0.0 255.255.255.0 10.254.0.9"
push "route 172.30.0.0 255.255.255.248 10.254.0.9"
ifconfig-pool-persist ipp.txt
keepalive 10 120
cipher AES-256-CBC
#comp-lzo
persist-key
persist-tun
client-to-client
status /var/log/openvpn-status.log
log-append /var/log/openvpn.log
verb 3
mssfix 1200
client
proto udp
dev tap7
remote "removed"
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert labkey5.crt
key labkey5.key
ns-cert-type server
cipher AES-256-CBC
route 172.30.0.27 255.255.255.255 10.72.0.27
verb 5
