Exclude PUblic IP from openvpn server

vijaybhatia

Hi,

is there any way to exclude public Ip of my webserver to my openvpn users from server side.so when users conenects vpn they can use there own bandwidth to download .
i have successfully achieve this by changing in open vpn client config. can we do this from server side without changing anything at user end.

300000

you can use push from server to client so it is the same as client

vijaybhatia

how can i do that, for e.g i need to exclude 182.72.15.35 what will be the correct entry in server config.
BTW my users are connecting to server in tunnel mode.

vijaybhatia

300000 wrote you can use push from server to client so it is the same as client

how can i do that, for e.g i need to exclude 182.72.15.35 what will be the correct entry in server config.
BTW my users are connecting to server in tunnel mode.

300000

if you want to do that from server just add this line into your server

push "route 182.72.15.35 255.255.255.252 net_gateway "

this way client will use local internet to access this ip instead your vpn server bandwidth.

vijaybhatia

300000 wrote if you want to do that from server just add this line into your server

push "route 182.72.15.35 255.255.255.252 net_gateway "

this way client will use local internet to access this ip instead your vpn server bandwidth.

Thanks buddy, one more query please. what incase we have multiple gateways.
E.g i have 100 openvpn users. 50 users have 192.168.0.1 local gateway and rest have 192.168.1.1.
how this will work in this situation.

300000

That is when folder CCD take part . Every client have it own certificate and the name on the client is the common on name certificate .when client connect to server . The server will know which one connect and that client will have different thing push down for that only

For example you got 2 client one name is jonh and one is smith . Inside CCD folder you create a file name jonh and open it edit with

push "route 182.72.15.35 255.255.255.252 net_gateway "

Whenever jonh connect it to server will push all content inside the file to jonh only so you can have many option on different user as you like . That way people use it to control and add or remove route to client as they see it fit