Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm tasked with implementing VPN access on a gateway. The LAN DHCP server is configured to assign the same IP address to a given MAC address. I would like to have this functionality for clients who connect over the VPN. I know I can configure openVPN and strongSwan to use a 3rd party DHCP server, but do daemons use the client MAC address for the DHCP request? Everything I've read doesn't go into this detail, but I imagine it would use the TAP interface MAC address. Am I wrong about this? How much work would it be to configure/patch the VPN server software to achieve this functionality?

share|improve this question
up vote 2 down vote accepted

with openVPN, any traffic from clients in ethernet bridged mode using 3rd party DHCP is passed with the client's tap0 mac address intact. So if the client has a consistent mac address for their tap0 adapter, you can then allocate them the same IP everytime. I'm not sure if the same behaviour occurs using openVPN's built in DHCP.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.