Ping Static IP VPN User

VPN-Newbie-1337

Good day,

I would like to be able to ping/reach a vpn user with a static ip address. However the access server only creates 2 interfaces (as0t0 and as0t1) for the dynamic ips, but no interface for the static users network. Is there a way to add an interface to access the static ip users network? Or somehow else reach it?

openvpn_inc

Hello VPN-Newbie-1337,

You do not need to do anything with the interfaces. The static IP will work without requiring any adjustment to network interfaces on the Access Server. However VPN clients are normally only reachable from the Access Server itself, unless you enable routing and set up appropriate return routes in your network.

See this page that describes what is needed to enable traffic to be initiated from a device on Access Server side's networks.
https://openvpn.net/vpn-server-resources/reach-openvpn-clients-directly-from-a-private-network/

Kind regards,
Johan

VPN-Newbie-1337

Hi openvpn_inc,

what I am trying to do is to reach a specific PC in the VPN network from outside. My idea was to write some ip table rules to get the traffic from a specific Port routet to the PC. But as I can not even ping the PC using the interfaces of the access server I am a bit stuck here.

openvpn_inc

Hello again,

From outside? Then use the DMZ function in user permissions for that. With that you can open a port on an IP on the Access Server itself, to be redirected to an IP of a VPN client. Then a static IP for the VPN user isn't even needed as Access Server will automatically update the rules for redirection whenever the user connects.

See this page that describes how to use the DMZ function.
https://openvpn.net/vpn-server-resources/how-to-setup-dmz-in-openvpn-access-server/

Kind regards,
Johan

VPN-Newbie-1337

Hi,

it works perfectly, almost too good to be true 🙂. Thank you very much!

Regards