Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Ive set up an OpenVPN server at my place and handed out a certificate to a client who has an openvpn client at his place.

I need require that he should be able to connect to the vpn server only from one IP address (his current one). How can I do this?

share|improve this question

migrated from May 30 '10 at 15:31

This question came from our site for professional and enthusiast programmers.

what's the OS - is openvpn running under linux/windows/sth else? – pQd May 30 '10 at 16:58

I don't believe OpenVPN has any built-in method to control access based on IP address. You probably will need to use either your border firewall, or the firewall for that host OS to limit access as required.

Personally, I am not sure that it is worth the effort. If you have a good set of keys and HMAC authentication there is very low chance of anyone else being able to get it.

share|improve this answer
sounds like the client may be using the host as a bridge point for their private net, in which case if the vpnclient is moved to another location, the cert will still be valid, but the host may not be in the appropriate and safe network. – Jimsmithkka Sep 1 '10 at 6:00

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.