On Wed, May 15, 2013 at 3:21 AM, Jim Alles <kb3tbx@gmail.com> wrote:
I was wondering if it were possible for a VPN server package to consistently assign a specific, reserved IP address to a VPN client based on the authenticating certificate.
Yes, that's possible in most VPN systems. A little quote from OpenVPN's man page:
OpenVPN's internal client IP address selection algorithm works
as follows:
1 -- Use --client-connect script generated file for static IP
(first choice).
2 -- Use --client-config-dir file for static IP (next choice).
3 -- Use --ifconfig-pool allocation for dynamic IP (last
choice).
So you can even run a script to select the IP for the client.