I have several clients connecting to the central server/firewall. The client conf is like that: [i]dev tun210 secret 00111000012.key script-security 1 remote astevpn.dyndns.org rport 20014 ifconfig 10.14.14.210 10.14.210.14 comp-lzo proto tcp-client ping-timer-rem ping 30 ping-restart 60 tun-mtu 1500 tun-mtu-extra 64 float persist-tun persist-key persist-local-ip log /var/log/openvpn/oz.log [/i] while the server conf for this client is: [i] dev tun14 secret 00111000012.key script-security 1 lport 20014 ifconfig 10.14.210.14 10.14.14.210 comp-lzo proto tcp-server ping 30 ping-restart 60 tun-mtu 1500 tun-mtu-extra 64 float persist-tun persist-key persist-local-ip log /var/log/openvpn/00111000012.log [/i] Each client creates a new tun interface (i prefer the tun rathar then tap for vpn creation) with the proper ip address. So now, if I'd like to create a standard connection for all of the clients on the server, I'd create a new ip address for all of them on the server. The network interfaces configuration file is this: [i]auto lo iface lo inet loopback auto eth0 iface eth0 inet dhcp [/i] Note that eth0 is connected to the internet so I think it shouldn't be secure to add a new: [i]auto lo iface lo inet loopback auto eth0 iface eth0 inet dhcp auto eth0:1 iface eth0:1 inet static address 10.0.0.1 netmask 255.0.0.0 [/i] for example. What is your suggestion? Thanks in advance :)

[quote="pvassalli"][i]auto lo iface lo inet loopback auto eth0 iface eth0 inet dhcp auto eth0:1 iface eth0:1 inet static address 10.0.0.1 netmask 255.0.0.0 [/i][/quote] As for windows it wouldn't work. Setting static IP for an interface, automattical disables DHCP. I think in Linux is the same. Try using a virtual network adapter.

Multiple VPN connections

pvassalli

I have several clients connecting to the central server/firewall.
The client conf is like that:

dev tun210
secret 00111000012.key
script-security 1
remote astevpn.dyndns.org
rport 20014
ifconfig 10.14.14.210 10.14.210.14
comp-lzo
proto tcp-client
ping-timer-rem
ping 30
ping-restart 60
tun-mtu 1500
tun-mtu-extra 64
float
persist-tun
persist-key
persist-local-ip
log /var/log/openvpn/oz.log

while the server conf for this client is:

dev tun14
secret 00111000012.key
script-security 1
lport 20014
ifconfig 10.14.210.14 10.14.14.210
comp-lzo
proto tcp-server
ping 30
ping-restart 60
tun-mtu 1500
tun-mtu-extra 64
float
persist-tun
persist-key
persist-local-ip

log /var/log/openvpn/00111000012.log

Each client creates a new tun interface (i prefer the tun rathar then tap for vpn creation) with the proper ip address.
So now, if I'd like to create a standard connection for all of the clients on the server, I'd create a new ip address for all of them on the server.
The network interfaces configuration file is this:

auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp

Note that eth0 is connected to the internet so I think it shouldn't be secure to add a new:
auto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp
auto eth0:1
iface eth0:1 inet static
address 10.0.0.1
netmask 255.0.0.0

for example.
What is your suggestion?
Thanks in advance 🙂

maikcat

hi there,

i believe that server directive can help you out..

can you check it and tell me?

Michael

Mimiko

pvassalli wroteauto lo
iface lo inet loopback

auto eth0
iface eth0 inet dhcp
auto eth0:1
iface eth0:1 inet static
address 10.0.0.1
netmask 255.0.0.0

As for windows it wouldn't work. Setting static IP for an interface, automattical disables DHCP. I think in Linux is the same.

Try using a virtual network adapter.