iroute - multiple client with identical ccd-entries

pirmin

hi all

What happens if I have the following setup and I would like to reach the host 10.0.1.10 from the Server (172.16.0.10)?

Server:
eth0: 172.16.0.10/24
default-gw: 172.16.0.1
tun0: 192.168.179.1/24
ccd-config:
Client-A:
- ifconfig-push 192.168.179.10 255.255.255.0
- iroute 10.0.1.0 255.255.255.0
- iroute 10.0.5.0 255.255.255.0
Client-B:
- ifconfig-push 192.168.179.11 255.255.255.0
- iroute 10.0.1.0 255.255.255.0
- iroute 10.0.6.0 255.255.255.0

Client-A:
eth0: 172.16.10.10/24
default-gw: 172.16.10.1
tun: 192.168.179.10/24
can-reach-networks:
- 10.0.1.0/24
- 10.0.5.0/24

Client-B:
eth0: 172.16.20.10/24
default-gw: 172.16.20.1
tun: 192.168.179.11/24
can-reach-networks:
- 10.0.1.0/24
- 10.0.6.0/24

Both Client-A and Client-B can reach the same network 10.0.1.0/24. What is the behavior of openVPN if I try to reach an host (10.0.1.10), for example ssh, from the Server (172.16.0.10)?

Thanks for your answers.

TinCanTech

Openvpn will probably use which ever --iroute was added last ..

We don't configure things that way, so maybe you can tell us what happens ?

pirmin

Hi TinCanTech
Thanks for your reply.

TinCanTech wrote Openvpn will probably use which ever --iroute was added last ..

We don't configure things that way, so maybe you can tell us what happens ?

So in which way do you configure things if you have the above mentioned setup?

Regards.

pirmin

A test showed, that openvpn will use the last added iroute if there are identical iroute's from different clients. This ( I think so) will also mess up with backroutes.

Regards.