ordex wrote
are you using the same certificate? IF so, that is expected behaviour, because only one client is allowed to connect with a gien cert/common-name.
If you want to still permit that, you have to use --duplicate-cn on the server, but it is NOT recommended.
Thank you very much Sir!
I can’t put into words how valuable was your help and how I’m grateful for it!
The problem was that (as I understood) the OpenVPN requires to provide specific IPv6 settings for each client in ccd if there’re setting for IPv4 already present.
I just added specific IPv6 settings for each ccd file and the problem has gone.
Also (thanks to your suggestion to use scripts for NDP) I was able to setup automatic NDP configuration with Dynamic NDP proxy with OpenVPN hooks.
I added hook in the OpenVPN server conf:
learn-address /etc/openvpn/learn-address
With the following learn-address script:
#!/bin/sh
action="$1"
addr="$2"
case "$action" in
add | update)
ip neigh replace proxy "$addr" dev tun0
;;
delete)
ip neigh del proxy "$addr" dev tun0
;;
esac
And now it works as it should : )
Without You I had zero chances to setup that dual-stack!
