RRI
Hi,
My server conf does not include client-to-client line, but clients connected to same VPN server are still able to e.g ping each other. My configuration looks like this. How to restrict VPN clients to communicate only with server?
verb 3
local 0.0.0.0
port 1194
proto tcp-server
dev tun_vpn
ca /etc/openvpn/keys/ca.crt
dh /etc/openvpn/keys/dh.pem
tls-auth /etc/openvpn/keys/ta.key 0
cert /etc/openvpn/keys/server.crt
key /etc/openvpn/keys/server.key
crl-verify /etc/openvpn/keys/crl.pem
status /var/log/vpn.status
log-append /var/log/vpn.log
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
cipher AES-256-CBC
topology subnet
mode server
tls-server
push "topology subnet"
ifconfig 10.10.10.254 255.255.255.0
ifconfig-pool 10.10.10.1 10.10.10.200 255.255.255.0
ifconfig-pool-persist /etc/openvpn/vpn_ipp.txt
max-clients 250
client-config-dir /etc/openvpn/vpn_ccd
# Extra parameters:
push "route-gateway 10.10.10.254"
#push "route 10.10.10.0 255.255.255.0 10.10.10.254"
push "route 10.50.0.0 255.255.255.0 10.10.10.254"
# EOF
