We use it to ensure the same user is assigned the same IP when connected via VPN for audit purposes. You can pre-configure the file and set seconds = 0 to tell OpenVPN to only read the file. You should be able to do this with the ifconfig-pool-persist config option. If it is free, the client is given the adress he asked before If the adress is already taken, the handshake fails.Client Connect to the VPN server and asks for a specific adress ("give me the ip: 172.16.0.22").And everything I tried didn't succeed.īasically, what I have in mind would be the following: Is it possible to set the ip adress in the client configuration file ? I didn't found anything in the documentation about that particular topic. This is a requirement since generating one certificate for each devices will be too constraining (moreover, we don't want to change the configuration of the VPN server if we add a device in the system) I am aware of client-config-dir and ifconfig-push but i cannot use them because all my devices use the same certificate ( duplicate-cn is enabled). In my use case, the devices are all identified by a number and I would like their ip adresses to match their ID (e.g: the device number 6 will have an ip in X.X.X.6). I am setting up a VPN network with a lot of little devices (running OpenWRT).
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |