I also tried to use the ccd with different segment, with config below:
server.conf
client-config-dir /etc/openvpn/ccd
route 10.8.2.0 255.255.255.0
/etc/openvpn/ccd/username1:
Code:
ifconfig-push 10.8.2.9 10.8.2.10
but still getting 10.8.0.x internal IP instead of 10.8.2.x.
Also put in IPtables:
iptables -A FORWARD -s 10.8.2.0/24 -j ACCEPT
Hi dafyre thanks for the reply. Yes Joy and I tried that as well. We tried to change IP's based on IP Addressing schema below:
[ 1, 2] [ 5, 6] [ 9, 10] [ 13, 14] [ 17, 18]
[ 21, 22] [ 25, 26] [ 29, 30] [ 33, 34] [ 37, 38]
[ 41, 42] [ 45, 46] [ 49, 50] [ 53, 54] [ 57, 58]
[ 61, 62] [ 65, 66] [ 69, 70] [ 73, 74] [ 77, 78]
[ 81, 82] [ 85, 86] [ 89, 90] [ 93, 94] [ 97, 98]... and so on
but still no luck to get the static IP we assign. Still getting IP on DHCP.
Thanks.
Hi Everyone,
Is there anyone who can help me to assign static IP on OpenVPN using Ubuntu 12.04.
Here's my config on my server.conf:
port 1194
proto udp
dev tun
ca ca.crt
cert myserver.crt
key myserver.key # This file should be kept secret
dh dh1024.pem
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
push "dhcp-option DNS 208.67.222.222"
push "dhcp-option DNS 208.67.220.220"
client-to-client
keepalive 10 120
comp-lzo
max-clients 10
persist-key
persist-tun
status openvpn-status.log
verb 3
mute 20
And I created a ccd directory and config:
mkdir /etc/openvpn/ccd
touch /etc/openvpn/ccd/username1
/etc/openvpn/ccd/username1:
Code:
ifconfig-push 10.8.0.9 10.8.0.10
But did not getting the IP I assigned it gives the dhcp availabale IP.
Hope someone can help me with this.
Thanks in advance
Hi Scott,
Yes, that's what I mentioned on my earlier messages. I think we got misunderstanding. Anyway, when I tried to follow the link I provided it seems that ccd is not taking effect, users define on ccd still getting 10.8.0.x IP instead of 10.8.2.x IP. I think user must take effect the assigning of internal IP address then you can route which public IP he will use.
We're don't need multiple VPN. What we want to do is we will use 2 different Public IP address. We are not confuse on how our VPN works, we cannot setup it if we don't know how it works. I Think for better explanation on what we need to do, please refer to this link.
If user1 will check his public IP address on www.whatismyipaddress.com user1 will see his Public IP is 123.123.255.120
If User2 will check his public IP address on www.whatismyipaddress.com user2 will see his Public IP is 123.123.255.121.
@scottalanmiller We need to use different Public IP address. If we connect to our current setup of VPN we will use 123.123.255.120 (example Public IP) all users will use that Public IP. What we need is user1(authenticated to Daloradius) on will use Public IP of 123.123.255.120 and user2 (authenticated to Daloradius) must use 123.123.255.121. We need to different Public IP for us to login on our specific website simultaneously. Website login user only allow 1 public IP. If we login on website using same public IP we will not allow to login.
To make it simple, we need to use 2 different public IP address, since the website we will access are only allow 1 login account simultaneously for each public IP. For us to have 2 login simultaneous accounts we need to use 2 different Public IP address.
Thanks.
We have 2 different sites that will use different Public IP address with different restrictions. And those 2 different public IP address should be configure in our 1 VPN server.
Thanks for the reply Scott.
Hi Scott,
I am friend of Joy and we are planning to use two different IP for each our team will use different IP as it is our requirements on our project. Two different teams will use different IP.
We add this
client-config-dir /etc/openvpn/ccd
route 10.8.2.0 255.255.255.0
on /etc/openvpn/server.conf
Then
mkdir /etc/openvpn/ccd
touch /etc/openvpn/ccd/user1
touch /etc/openvpn/ccd/user2
Edit /etc/openvpn/ccd/user1:
ifconfig-push 10.8.0.1 10.8.0.2
Edit /etc/openvpn/ccd/user2:
ifconfig-push 10.8.2.1 10.8.2.2
IP Tables:
iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
iptables -A FORWARD -s 10.8.2.0/24 -j ACCEPT
iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 123.123.255.120
iptables -t nat -A POSTROUTING -s 10.8.2.0/24 -j SNAT --to-source 123.123.255.121
But when user2 login still getting 10.8.0.x IP.
I think that the ccd config does not effecting.
Thanks.