It seems to be a common pattern that people put something like this in a ccd file:
ifconfig-push 172.141.127.1 172.141.127.2
And then use iptables to limit what access 172.141.127.1 has. But is there an server side enforcement to prevent the client matching that ccd common_name from using a different address?
