The OpenVPN Server assign the conflict ip address.

This forum is for admins who are looking to build or expand their OpenVPN setup.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
nash
OpenVpn Newbie
Posts: 8
Joined: Sat Feb 26, 2011 4:06 am

The OpenVPN Server assign the conflict ip address.

Post by nash » Thu Apr 28, 2011 11:55 am

I use client-config-dir to set the ip address to some of my priority client, and let the OpenVPN server automatically assign ip address to the others.

But sometime when my priority client doesn't connect to the vpn server, The OpenVPN server assign my priority client's ip to the normal client. That make the ip of my priority client conflict with the new client when it connect to the server again.

How to reserve those ip address just for the client that have the configuration ?

Thank you in advance.

P.S. this is my server config

port 1194
server 192.168.11.0 255.255.255.0
cipher AES-128-CBC
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
script-security 3 system
auth-user-pass-verify VPNAuthen.exe via-env
client-cert-not-required
username-as-common-name
client-config-dir client-config
comp-lzo
keepalive 5 120
persist-key
persist-tun
status openvpn-status.log
verb 3

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: The OpenVPN Server assign the conflict ip address.

Post by janjust » Fri Apr 29, 2011 8:48 pm

does the 'priority client' connect using a unique certificate? if so, then you can either use the far end of your 'server' range or you can even set up a separate range for the 'client-config-dir' clients; for example, if you use

Code: Select all

server 192.168.11.0 255.255.254.0
(note the 4) and assign the 'priority clients' IPs from the network range 192.168.12.0 then the regular clients will not likely overlap with them.
It's even possible to separate things even further, for which I'll gladly refer you to my book ;)

Post Reply