Hi * all my clients have unique certificates, "duplicate-cn" is not set, and certificate<-->IP associations are persisted into /etc/openvpn/ipp.txt. Usually that works just fine.
But every now and then, a client that has already an IP assigned in /etc/openvpn/ipp.txt (and has been using this IP address happily for many weeks) gets assigned another, yet-unused IP address! This results in duplicate entries in /etc/openvpn/ipp.txt, e.g. ... probe0005.example.com,XX.YY.ZZ.56 probe0005.example.com,XX.YY.ZZ.68 ... I don't see anything suspicious in the logs, no messages that would indicate why the OpenVPN server suddenly assigns new IP to a known client. What is going on there? Is persisting assignments to /etc/openvpn/ipp.txt unreliable? If so, is there another way to make client IPs constant? TA /nils. ==== server.conf ========================== local A.B.C.D port 1194 proto udp dev tun ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh2048.pem server XX.YY.ZZ.0 255.255.240.0 ifconfig-pool-persist ipp.txt push "route XX.YY.0.0 255.255.0.0" client-config-dir conf.d route XX.YY.0.0 255.255.255.0 route XX.YY.VV.0 255.255.255.0 keepalive 10 120 tls-auth ta.key 0 cipher AES-256-CBC comp-lzo persist-key persist-tun status openvpn-status.log verb 3 ==== client.conf ========================== client dev tun proto udp remote vpn.example.com 1194 resolv-retry infinite nobind persist-key persist-tun ca ca.crt cert client.crt key client.key ns-cert-type server tls-auth ta.key 1 cipher AES-256-CBC comp-lzo verb 3 ------------------------------------------------------------------------------ HPCC Systems Open Source Big Data Platform from LexisNexis Risk Solutions Find What Matters Most in Your Big Data with HPCC Systems Open Source. Fast. Scalable. Simple. Ideal for Dirty Data. Leverages Graph Analysis for Fast Processing & Easy Data Exploration http://p.sf.net/sfu/hpccsystems _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
