Static ips for OpenVPN

[mike7]

Looks like OpenVPN topology changed to subnet by default on recent fws.
I need to configure static addresses for vpn clients, is it possible to add ifconfig-pool support?

 

[RMerlin]

Looks like OpenVPN topology changed to subnet by default on recent fws.
I need to configure static addresses for vpn clients, is it possible to add ifconfig-pool support?

Add it to the Custom section.

 

[mike7]

Add it to the Custom section.

Unfortunately it is not possible to use server and ifconfig-pool simultaneously
It was the first what I tried.

Instead of server directive ifconfig should be used, more details https://community.openvpn.net/openvpn/wiki/Concepts-Addressing

config.ovpn should be

ifconfig <address> <mask>
ifconfig-pool <start-ip> <end-ip> <netmask>

and doesn't have server directive.

In such case I can push ip from ccd.

 

[john9527]

Use a postconf script to convert back to a net30 topology.

 

[RMerlin]

The existing implementation is already too complicated, and shows far too many esoteric config settings on the webui, scaring away a lot of users. I have no intention of adding any additional options to try to accommodate every unusual scenario the occasional advanced user might be looking for. If you need a different architecture than what is supported by the router, using a postconf script to setup your own openvpn configuration would be the way to go.

 

[mike7]

Will go with postconf, good idea, thank you for help