routeflush
Hi Guys,
Just purchased a license for OpenVPN, seems like an awesome product. I am trying to set up a configuration to be able to have a user login with the same account to two different machines and right away be able to use DNS to resolve the names for two machines if logged from them.
I am setting this up in AWS and initially configured it to be tied to a user w/static IP's and then using route53 to resolve an IP to an A host. This works but I now need to have two licenses being used up for one person.
I had selected an option for "Multiple Sessions per User" but I always get kicked off when I login with the same user.
Any help on the following I would really appreciate:
1. Using the same ID to login to OpenVPN server more than once
2. DNS configuration to resolve the names of the machines from which you login to openVPN.
Thank you in advance
TinCanTech
What openvpn version are you using ?
routeflush
I am using Access Server 2.1.3, AMI from AWS
Thanks
routeflush
Do I need to set up an internal Dynamic DNS service, so that when a new machine connects to the OPENVPN server, the IP is automatically updated to the hostname, where then I can use the hostname to reference the machine.
routeflush
If you could provide any help, seems I am hitting a limitation of the product or just using it in a way where it wasn't designed to.
Essentially I need the ability to set up an RDP,FileShare between two machines on a VPN network. I don't want to create a VPN account per machine, but use one account to login to both machines and have the machines hostnames be accessible either with DHCP or static. The problem is when I go to static it ties the login to the actual VPN user and not to host.
Again any help would be greatly appreciated....
routeflush
researching further, I think I definitely hit a limit based on this post from OpenVPN.net ( yes I have been searching first on the forums before created a new post )
https://forums.openvpn.net/viewtopic.php?t=22444
routeflush
Any more insight of what I can do before moving away from OpenVPN to a different product?
The Johan
The Access Server is not designed to update an external DNS server. If you want this, you'll have to make it yourself. You can for example poll /usr/local/openvpn_as/scripts/sacli VPNStatus or VPNSummary and grab the info you need to update a DNS server with some command line calls. Or you can set up a DNS server with static addresses and set up the Access Server to assign static IP addresses to each VPN user.
Using the same user account for all VPN connection is possible but this precludes the ability to use static IP addresses in the Access Server as an IP address can only be assigned once. You must have no setting whatsoever on the user account that you want to give the ability to have multiple VPN tunnels establish under the same user account. Of course this also means that all users are logging in under the same account so you have no way of identifying which user belongs to which host name in your DNS server, unless you filter on their real IP (their public IP from where they are making a connection).
So in short, what you want is a very strange combination of factors that seem to block each other. Good luck with that.
routeflush
Thank you very much for the response, this is exactly what I have experienced when researching this topic, I like the phrase "strange" since it really falls outside of the scope of what this product does best
The Johan
From what I read about your requirements, I think what you're really looking for is Layer 2 traffic. Though painful to setup in some cases, and with some serious downsides and lack of traffic flow control, and some other unpleasant side-effects, what it does is just basically tie all the computers together into one unhappy network, so that broadcast traffic will get through and it'll be kind of like plugging the VPN computers into your network. It's dirty, but it works. It sounds to me like that is what you want. So give it a try.
