Wrong IP Address for Client

[HamburgJoe]

Hi all,

I have a problem, that my clients receive a "wrong" IP-Address.

I have running Ubuntu 20.4 LTS running in VirtualBox, host is a Win 11 device.
On Ubuntu I have installed and running OpenVPN Access Server V2.10.2 with the Standard config after installation.

My Clients are able to establish a successfull connection via OpenVPN to my network. And here is my "maybe stupid" question:
The clients are receiving an 172.27.224.0 IP-Address, which I can find in Configuration -> VPN Settings.
The problem now is, that I am normally on a 192.168.55.0 network and the connected clients should get a static IP-Address (e.g. 192.168.55.200).
There is just one client connecting from time to time. And I need to connect from my PC to this static IP-Address.

When I enter the Static IP-Address for this specific user (User Management -> User Permission) I receive the error message:
There is no subnet configured for static (per-user) VPN IP addresses. Configure one on the VPN Settings page

When I am entering "Static IP Address Network (Optional)" in Configuration -> VPN Settings with the IP-Address 192.168.55.0 I am receiving the error message:
192.168.55.0 is not a canonical subnet -- the network address must be the first address in the subnet, such as 192.168.16.0

What am I missing? What do I wrong?

Your help and input is highly appreciatet.

Thank you very much in advance and have a good day

Joe

[openvpn_inc]

Hello Joe,

Do not try to make the VPN clients go onto the same subnet as your real network. This will just create a conflict.

VPN stands for virtual private network. Meaning an entirely new private network that exists only virtually between the VPN server and the VPN clients. The Access Server functions as a router to make it possible to reach the real network connected to the Access Server. That means your VPN tunnels are using a completely separate virtual network, and it is supposed to be that way.

You can go to VPN Settings > Routing > Allow access to these private subnets > 192.168.55.0/24 > yes, using NAT. Then VPN clients will be able to reach IP addresses in the 192.168.55.0/24 subnet.

Kind regards,
Johan

[HamburgJoe]

Hi Johan,

I will do it this way.

Thanks a lot for clarification.

Cheers Joe