14 May
2013
14 May
'13
8:21 p.m.
I was wondering if it were possible for a VPN server package to
consistently assign a specific, reserved IP address to a VPN client based
on the authenticating certificate.
The scope of the VPN server would be subject to the region/subnet coordinating
contact, such as a portion of:
Gateway area: 44.80.32/24 Central Pennsylvania
Thanks for your consideration.
73,
Jim A.
KB3TBX
15 May
15 May
5:10 a.m.
On Wed, May 15, 2013 at 3:21 AM, Jim Alles <kb3tbx(a)gmail.com> wrote:
I was wondering if it were possible for a VPN server
package to
consistently assign a specific, reserved IP address to a VPN client based
on the authenticating certificate.
Yes, that's possible in most VPN systems. A little quote from OpenVPN's man
page:
OpenVPN's internal client IP address selection algorithm
works
as follows:
1 -- Use --client-connect script generated file for static
IP
(first choice).
2 -- Use --client-config-dir file for static IP (next choice).
3 -- Use --ifconfig-pool allocation for dynamic IP
(last
choice).
So you can even run a script to select the IP for the client.
- Hessu
7:34 a.m.
Ok, a lot simpler and more flexible than I imagined. I have some reading to
do ;)
thanks,
Jim A.
On Wed, May 15, 2013 at 5:10 AM, Heikki Hannikainen <hessu(a)hes.iki.fi>wrote;wrote:
(Please trim inclusions from previous messages)
_______________________________________________
On Wed, May 15, 2013 at 3:21 AM, Jim Alles <kb3tbx(a)gmail.com> wrote:
I was wondering if it were possible for a VPN
server package to
consistently assign a specific, reserved IP address to a VPN client based
on the authenticating certificate.
Yes, that's possible in most VPN systems. A little quote from OpenVPN's
man page:
OpenVPN's internal client IP address selection algorithm
works
as follows:
1 -- Use --client-connect script generated file for static
IP
(first choice).
2 -- Use --client-config-dir file for static IP (next
choice).
3 -- Use --ifconfig-pool allocation for dynamic IP
(last
choice).
So you can even run a script to select the IP for the client.
- Hessu
_________________________________________
44Net mailing list
44Net(a)hamradio.ucsd.edu
http://hamradio.ucsd.edu/mailman/listinfo/44net
http://www.ampr.org/donate.html
4209
days inactive
4209
days old
2 comments
2 participants
participants (2)
-
Heikki Hannikainen -
Jim Alles