[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] client-config-dir not working


  • Subject: Re: [Openvpn-users] client-config-dir not working
  • From: Erich Titl <erich.titl@xxxxxxxx>
  • Date: Thu, 21 Jun 2007 15:08:42 +0000


Gabriele Bulfon wrote:
> Hello,
> I'm having trouble to have fixed IPs on remote clients.
> My config file for the openvpn server is:
> 
> ================================
> port 11194
> proto tcp
> dev tun
> ca /iserver/etc/openvpn/ca.crt
> cert /iserver/etc/openvpn/server.crt
> key /iserver/etc/openvpn/server.key
> dh /iserver/etc/openvpn/dh1024.pem
> server 10.1.1.0 255.255.255.0
> push "route 192.165.81.0 255.255.255.0"
> client-config-dir /iserver/etc/openvpn/ccd
> keepalive 10 120
> comp-lzo
> user nobody
> group nobody
> persist-key
> persist-tun
> status openvpn-status.log
> log         /iserver/var/log/openvpn/openvpn.log
> verb 3
> ================================
> 
> and inside the ccd folder, I have the clients files (macthing the key
> common names) like:
> 
> ccd/client1: ifconfig-push 10.1.1.6 255.255.255.0
> ccd/client2: ifconfig-push 10.1.1.7 255.255.255.0
> ccd/client3: ifconfig-push 10.1.1.8 255.255.255.0

This is the wrong syntax

it should be (in non infrastructure mode) something like
ifconfig-push 10.1.1.7 10.1.1.8

> 
> but the clients got IPs in a server chosen sequence that I don't undesrtand:
> - the first connecting get 10.1.1.6
> - the second get 10.1.1.10
> - the third get 10.1.1.14
> To me it seems like openvpn is ignoring my ccd files, and applying some
> kind of mask to assign IPs using a kind of offset.

it is, in /30 subnets because that is the default

see the HOWTO

cheers

Erich


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users