gabbiano.brillo
Hi,
I'm running for long time OpenVPN to connect a number of remote subnetworks together. The platform is over Linux, the configuration is routed client-server (i.e. with server (or client) and dev tun directives) with a star topology.
As we know, we can use the command "push route" to allow the clients to reach private subnets behind the server. My question is: is there any possibility to specify which client(s) the route has to be injected to, and which other clients the route must not be injected?
In other words, something similar we do with "route" and "iroute" directives (using the common name of the certificate to address the client of interest), where we can specify which private subnet is behind each client, but the other way around.
(192.168.1.0/24)
<Server>
-------------- <Client1>
|
-------------- <Client2>
E.g. 192.168.1.0/24 must be injected to Client1 and not to Client2.
Thank you in advance!
GB.
maikcat
please read about the use of ccd files (client config dir)
Michael.
gabbiano.brillo
Hi Michael,
thank you for your answer and sorry for the delay in my reply.
I studied the usage of ccd feature already, but apparently this works the other way around. I need to define what routes I have to push on the client side, while ccd appears to define the routes to be set on the server side only. Are you sure that ccd applies to my need?
Thank you again in advance!
GB.
maikcat
you can use push-route statement inside ccd files...
Michael.
