Hi All
Apologies if this has been asked before or posted in the wrong section.
I've done the searching reading around the problem and think I have my answer but posting in the hope of an alternative solution.
I am trying to use CCD to give some users an IP address on a different subnet so their access can be controlled.
As per the documentation here:
https://openvpn.net/index.php/open-source/documentation/howto.html#scope
The section "Configuring client-specific rules and access policies" makes it look like I can add routes and ifconfig-push entries in CCD to do this.
However, I am finding this isn't working - looks like the CCD entries aren't even being read.
my server.conf file has these settings:
dev tun1
server 192.168.57.0 255.255.255.0
route 192.168.58.0 255.255.255.0
client-config-dir ccd
in /etc/openvpn/ccd/user1 I have:
ifconfig-push 192.168.58.9 192.168.58.10
I created a cert with common name user1.
I am able to connect but user1 never gets the 192.168.58.9 address.
Always picks up a 192.168.57.x address from the server pool.
I know I can get it working with another instance and set the server vpn pool to match the address I am pushing in CCD.
Was trying to avoid this (myriad of reasons).
Am I missing something or is another instance on the same ip range the only way?
TIA
