Page 1 of 1

The OpenVPN Server assign the conflict ip address.

Posted: Thu Apr 28, 2011 11:55 am
by nash
I use client-config-dir to set the ip address to some of my priority client, and let the OpenVPN server automatically assign ip address to the others.

But sometime when my priority client doesn't connect to the vpn server, The OpenVPN server assign my priority client's ip to the normal client. That make the ip of my priority client conflict with the new client when it connect to the server again.

How to reserve those ip address just for the client that have the configuration ?

Thank you in advance.

P.S. this is my server config

port 1194
server 192.168.11.0 255.255.255.0
cipher AES-128-CBC
proto udp
dev tap
ca ca.crt
cert server.crt
key server.key
dh dh1024.pem
script-security 3 system
auth-user-pass-verify VPNAuthen.exe via-env
client-cert-not-required
username-as-common-name
client-config-dir client-config
comp-lzo
keepalive 5 120
persist-key
persist-tun
status openvpn-status.log
verb 3

Re: The OpenVPN Server assign the conflict ip address.

Posted: Fri Apr 29, 2011 8:48 pm
by janjust
does the 'priority client' connect using a unique certificate? if so, then you can either use the far end of your 'server' range or you can even set up a separate range for the 'client-config-dir' clients; for example, if you use

Code: Select all

server 192.168.11.0 255.255.254.0
(note the 4) and assign the 'priority clients' IPs from the network range 192.168.12.0 then the regular clients will not likely overlap with them.
It's even possible to separate things even further, for which I'll gladly refer you to my book ;)