j_jordan_a
I am using an IP Pool on a Cisco ASA 5515-X firewall for dynamic OpenVPN client IP assignment. When creating IP Pools on the ASA, the first IP in the subnet configured get the "default gateway" designation. When I connect via the OpenVPN client, I can see in the client logging that it is getting the correct IP for the gateway address. But, when I do an "ipconfig" on my Windows client there is no gateway that is listed and the subnet mask is wrong. Does the dynamic addressing need to be from an actual DHCP (because of DHCP options it is looking for) or should I be able to use this IP Pool from the firewall?
The OpenVPN instance is in our DMZ so I do not want any of this traffic going "inside" (don't want an internal DHCP Server). Also, I am attempting to hairpin all clients traffic out the same NATed IP that the clients came in on (with outside, outside PAT on the ASA). Anything more I need to configure on the OpenVPN Server side to allow this to happen? I am not allowing an traffic to go to internal, private IP spaces via the OpenVPN Server configuration (on the VPN Settings Routing section).
Thanks for any assistance that can be provided. 🙂
