0

We have setup 3 OpenVPN servers (v2.4) in 3 different physical machines. They are all part of the same network.

When a client (v2.3) is connected we want him to go on either one of the VPN servers by using the "remote-random" flag (each server gives a different IP range) The subnet on each server is /29

We also use the same certificate (for testing), thus "duplicate-cn" flag.

The problem is that when a client tries to connect multiple times to e.g vpn1 he gets assigned a different IP each time until there are no more IPs for the server to hand out.

At that point the client will establish a connection to the server but will not get an IP.

Is there any way to resolve this either either the server or the client side so that the client tries to connect to the other servers?

This VPN zone will be used temporarily for new clients which will be configured through puppet with a different VPN zone.

New contributor
Ane Kos is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • Why does the client connect multiple times? Why is your IP pool so small? – Michael Hampton May 15 at 17:12
  • 1. I do not have many client devices to test.. 2. this is a small pool which we want to use for devices that come online for the first time Even with mre devices the problem would appear The problem is that neither the client or the server does anything when a. the client does not get an IP (gets stuck there) b. the server does not detect that there are no more available IPs and does not block the new connection The problem would appear with more devices – Ane Kos May 15 at 17:22

Your Answer

Ane Kos is a new contributor. Be nice, and check out our Code of Conduct.

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.