Menu

Show posts

This section allows you to view all posts made by this member. Note that you can only see posts made in areas you currently have access to.

Show posts Menu

Messages - saurabh.manandhar

#1
20.1 Legacy Series / Re: Assign static IP to OpenVPN user
November 23, 2020, 10:39:43 AM
Hi,
Thanks for your response.

In regards to IP I orignally posted, they were typos, I meant 158 and so on. Apologies for that mistake.

The topology is configured to subnet. I have set the following

ifconfig-push x.y.z.158 255.255.255.0

I tried setting this up from GUI (VPN>OpenVPN>Client Specific Override><username>>Advanced Settings, but it does not work.
Then I created a file with <username> as filename in /var/etc/openvpn-csc/1/ and put the line in it. After this, it works flawlessly.

P.S.
I have upgraded the system to OPNsense 20.7.3 after my original post

So far, I have been using this method as a workaround, because I don't have a lot of users for this VPN server. However, I would like to have more permanent solution where I can set this up using GUI.

#2
20.1 Legacy Series / Assign static IP to OpenVPN user
October 14, 2020, 11:26:41 AM
Hi,
I have been trying to setup OpenVPN to assign static IP to VPN users. I have tried using Client Specific Overrides as follows:

Common name set as username,
IPv4 Tunnel Network set as a subnet of main tunnel (IPv4 Tunnel Network on Server is x.y.z.0/24, and this subnet is x.y.z.256/30)

I have tried with setting up IPv4 Local network set as nothing and x.y.z.258/32

I have also tried setting up advanced settings with "ifconfig-push x.y.z.257 x.y.z.258", "ifconfig-push x.y.z.258 x.y.z.257", "ifconfig-push x.y.z.257 255.255.255.0" and "ifconfig-push x.y.z.257 255.255.255.255"

I have tried restarting OpenVPN service

So far nothing works.

Do I have to re-create the .ovpn file and import again?  Do I have to generate user certificates? Currently I have setup to use only username/password as authentication method.

Any help will be greatly appreciated.

I am new to OpnSense, so if you need any configs and logs, I would appreciate if you can point me the location of those files.

Apologies for my language.