Specifying external IP pool and custom port per client.

luis84

Hello everyone,

My clients connect to my OpenVPN server. All traffic is routed through it.

My server has 30 Ip's assigned to it. It's a private server.

When my clients connect now, they all get a 10.x.x IP which is fine. But their external IP is always the same, the main IP of my server. I want each client to get their own dedicated external IP, there are 30 available to my server.

How would I do this with my serv conf?

Also...

Right now in my server config, I have port 1194 and proto UDP.

But let's say I want one of my clients to connect with proto TCP on port 53 instead of 1194 UDP, but I want another to use 1194 UDP on the same server. How would I specify that ? Can I have the server respond to clients request to any port / proto?

maikcat

hi there,

When my clients connect now, they all get a 10.x.x IP which is fine. But their external IP is always the same, the main IP of my server. I want each client to get their own dedicated external IP, there are 30 available to my server.

this has nothing to do with openvpn itself,you can setup one to one NAT on your gateway.

But let's say I want one of my clients to connect with proto TCP on port 53 instead of 1194 UDP, but I want another to use 1194 UDP on the same server. How would I specify that ? Can I have the server respond to clients request to any port / proto?

you must start multiple instances of openvpn daemon,you can use the same server certificates
but you must configure routing accordingly..

Michael.

luis84

Thank you, so the NAT is seperate. I will talk to my tech team and see what they know about the IP assignments.

In terms of OpenVPN... what if I want to make the IP static, say I have 30 IP's and each connecting client gets one (NAT) but then what happens if I want them to have the same IP each time they login (same external IP), I assume NAT still handles that?

In regards to multiple instances, OVPN server is Windows based, so it's OpenVPN GUI, won't allow multiple instances. Any advice?

Thank you.

maikcat

In terms of OpenVPN... what if I want to make the IP static, say I have 30 IP's and each connecting client gets one (NAT) but then what happens if I want them to have the same IP each time they login (same external IP), I assume NAT still handles that?

yeap...

In regards to multiple instances, OVPN server is Windows based, so it's OpenVPN GUI, won't allow multiple instances. Any advice?

AFAIK if you place second or third ovpn and you right click on GUI you see all the configs
and you can choose which one to start...am i wrong?

Michael.

luis84

Hello ^ wanted to share some results.

I ended up adding all the configs to the config folder and then running openserv.exe as a service in windows. It auto runs every config, can have all the ports I need.

Thank you very much for the advice.

maikcat

the downside is that you cant simply drop only one connection
if you want to..

its all or nothing..

cheers,

Michael.

luis84

Very true, I ended up getting "OpenVPN-Control" console to be able to control via GUI and i can force logoff a specific client, but not drop a whole server/port.