Hi,
I am running OpenVPN 2.4.9 version on CentOS Linux release 7.8.2003 (Core) server. I am configuring client-specific rules and access policies by referring to
https://openvpn.net/community-resources/how-to/#configuring-client-specific-rules-and-access-policies. I have not mentioned
topology subnet in /etc/openvpn/server.conf file and have run the below command to find out Common Name.
#openssl x509 -in rameshreddy.crt -noout -subject | sed -e ‘s/.*CN=\([^\/]*\)\/.*/\1/’
subject= /CN=OpenVPN-Client
#cat /etc/openvpn/ipp.txt
OpenVPN-Client.rameshreddy,10.8.0.6
#cat /etc/openvpn/ccd/OpenVPN-Client.rameshreddy
ifconfig-push 10.8.0.6 10.8.0.5
################server.conf#######################
#cat /etc/openvpn/server.conf
server 10.8.0.0 255.255.255.0
verb 3
key /etc/openvpn/server.key
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
dh /etc/openvpn/dh.pem
keepalive 10 120
persist-key
persist-tun
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "route 192.168.0.0 255.255.255.0"
duplicate-cn
user nobody
group nobody
proto tcp
port 1195
dev tun
status /var/log/openvpn-status.log 60
status-version 2
log-append openvpn.log
################server.conf#######################
################client.conf#######################
dev tun
proto tcp
remote 211.11.198.19 1195
cipher AES-256-GCM
auth SHA1
resolv-retry infinite
nobind
persist-key
persist-tun
client
verb 3
key rameshreddy.key
cert rameshreddy.crt
ca ca.crt
################client.conf#######################
I want to restrict OpenVPN Client IP to 10.8.0.6 for User Ramesh Reddy. Please let me know if the above configurations are correct and i look forward to hearing from you. Thanks in advance.
Best Regards,
Kaushal
