Two Tunnels from one Dynamic IP

Need help configuring your VPN? Just post here and you'll get that help.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Forum rules
Please use the [oconf] BB tag for openvpn Configurations. See viewtopic.php?f=30&t=21589 for an example.
Post Reply
Aksels
OpenVpn Newbie
Posts: 1
Joined: Tue Jun 14, 2011 5:36 am

Two Tunnels from one Dynamic IP

Post by Aksels » Tue Jun 14, 2011 5:49 am

Hello.
I use openVPN for many years now. Works like a charm.
One customer uses it for remote access to his machines.
I use the WRT54GL for those purpose.
So my costomer gets a ready to go WRT and just plugs his machine to the switched ports and the network of the buyer to the wan port.
My WRT connects over the buyers internal network to a server in the internet with a static IP.
The machines network is masqed and has nothin to do with the buyers network (except it must not have the same IP Range).
Works fine. Now the problem: one customer bought two machines with two WRTs.
Not they come in at the server with the same IP. I watched them connecting and was able to ping both subnets, but a few seconds later I got a message in my log, that two tunnels came in from the same IP and that could be an attack (something similar) and the tunnels will be stopped.
As it worked for a few seconds, I guess it is a security feature.
Found nothing in the manuals. How can I stop that?

Aksels

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: Two Tunnels from one Dynamic IP

Post by janjust » Tue Jun 14, 2011 7:54 am

The exact log message is important here.
If a customer buys two boxes then give him two certificates and/or userids; it's perfectly well possible to connect 2 clients via the same WAN IP to the same VPN server , but you need to make sure that the 2 clients are distinguishable based on certificate or username.

Post Reply