need help

pietr0000

Hello, never had to work with openvpn before and now i need some help...
1) Are you able to accept connections only from certain ips / ip ranges without the use of iptables?
2) Are you able to log in an openvpn server by just having the ip port username and password without the certificate or the openvpn static key?

The Johan

1) With Access Server, if you implement a post_auth script to read the connecting IP from clients before a final approval of the login, you can indeed do this. It is similar to the MAC address lock script, but just based on IP instead.

2) You do need a client program installed, but other than that, yeah, you can do that with Access Server by going to the client web interface, enter your credentials, download the offered Connect Client, and make a connection. If you have configured MFA like Google Authenticator you can further secure this type of login.

pietr0000

novaflash wrote 1) With Access Server, if you implement a post_auth script to read the connecting IP from clients before a final approval of the login, you can indeed do this. It is similar to the MAC address lock script, but just based on IP instead.

2) You do need a client program installed, but other than that, yeah, you can do that with Access Server by going to the client web interface, enter your credentials, download the offered Connect Client, and make a connection. If you have configured MFA like Google Authenticator you can further secure this type of login.

what if there is no web interface?
thanks for the help btw

The Johan

Well if there is no web interface, you will need to retrieve the connection profile from your server in some other way like an administrator handing you the files somehow. I mean, without a web interface, there's no way to get that information yourself.