Ryfujk

Did Nintendo change its mind about 68000 SNES?

Jem'Hadar, something strange about their life expectancy

Emojional cryptic crossword

Do native speakers use "ultima" and "proxima" frequently in spoken English?

Is there any common country to visit for uk and schengen visa?

Unfrosted light bulb

What is the difference between something being completely legal and being completely decriminalized?

Does convergence of polynomials imply that of its coefficients?

Is xar preinstalled on macOS?

Would mining huge amounts of resources on the Moon change its orbit?

Was World War I a war of liberals against authoritarians?

Why do I have a large white artefact on the rendered image?

How can a new country break out from a developed country without war?

How do you justify more code being written by following clean code practices?

How do researchers send unsolicited emails asking for feedback on their works?

Are hand made posters acceptable in Academia?

Symbolism of 18 Journeyers

Isn't the word "experience" wrongly used in this context?

10 year ban after applying for a UK student visa

Single word to change groups

How can an organ that provides biological immortality be unable to regenerate?

How are passwords stolen from companies if they only store hashes?

How old is Nick Fury?

How to find the largest number(s) in a list of elements, possibly non-unique?

openvpn with ccd - not reading ifconfig-push from ccd

Problems setting up a VPN: can connect but can't ping anyoneOpenVPN connection from within 2nd subnet in office?openvpn multiple instances route issue?prevent openvpn client from changing ip of tap deviceCannot raise Max number of concurrent openvpn clientsConfiguring OpenVPN server (Debian 8) and client (Windows 10)OpenVPN Client Local LAN AccessOpenVPN not routing via default routeIs it possible for OpenVPN Client to change IP address of “tun” device ignoring “ifconfig-push”?

0

Trying to set use ccd with openvpn 2.
I want some clients to get IP addresses on a separate subnet so their access to systems can be limited.

my server.conf file has these settings:
dev tun0
server 192.168.57.0 255.255.255.0
route 192.168.58.0 255.255.255.0
client-config-dir ccd

in /etc/openvpn/ccd/user1 I have:
ifconfig-push 192.168.58.9 192.168.58.10

I created a cert with common name user1.

I am able to connect but user1 never gets the 192.168.58.9 address.
Always picks up a 192.168.57.x address from the server pool.

What am I doing wrong or missing here?

Thanks.

openvpn

share|improve this question

asked Jun 8 '16 at 21:07

infidelinfidel

1

bumped to the homepage by Community♦ 8 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

add a comment | 

0

Trying to set use ccd with openvpn 2.
I want some clients to get IP addresses on a separate subnet so their access to systems can be limited.

my server.conf file has these settings:
dev tun0
server 192.168.57.0 255.255.255.0
route 192.168.58.0 255.255.255.0
client-config-dir ccd

in /etc/openvpn/ccd/user1 I have:
ifconfig-push 192.168.58.9 192.168.58.10

I created a cert with common name user1.

I am able to connect but user1 never gets the 192.168.58.9 address.
Always picks up a 192.168.57.x address from the server pool.

What am I doing wrong or missing here?

Thanks.

openvpn

share|improve this question

asked Jun 8 '16 at 21:07

infidelinfidel

1

bumped to the homepage by Community♦ 8 mins ago

This question has answers that may be good or bad; the system has marked it active so that they can be reviewed.

add a comment | 

Trying to set use ccd with openvpn 2.
I want some clients to get IP addresses on a separate subnet so their access to systems can be limited.

my server.conf file has these settings:
dev tun0
server 192.168.57.0 255.255.255.0
route 192.168.58.0 255.255.255.0
client-config-dir ccd

in /etc/openvpn/ccd/user1 I have:
ifconfig-push 192.168.58.9 192.168.58.10

I created a cert with common name user1.

I am able to connect but user1 never gets the 192.168.58.9 address.
Always picks up a 192.168.57.x address from the server pool.

What am I doing wrong or missing here?

Thanks.

openvpn

share|improve this question

asked Jun 8 '16 at 21:07

infidelinfidel

1

share|improve this question

asked Jun 8 '16 at 21:07

infidelinfidel

1

share|improve this question

asked Jun 8 '16 at 21:07

infidelinfidel

1

asked Jun 8 '16 at 21:07

infidelinfidel

1

asked Jun 8 '16 at 21:07

infidelinfidel

1

1 Answer
1

active

oldest

votes

0

server 192.168.57.0 255.255.255.0
tells your server that it has to operate on 192.168.57.0/24 subnet so it will never assign addresses from 192.168.58.0/24 subnet. You have to change netmask in server option to server 192.168.56.0 255.255.252.0 so it will span to 192.168.58.0/24 subnet.

sipcalc 192.168.56.0 255.255.252.0

-[ipv4 : 192.168.56.0 255.255.252.0] - 0



[CIDR]

Host address            - 192.168.56.0

Host address (decimal)  - 3232249856

Host address (hex)      - C0A83800

Network address         - 192.168.56.0

Network mask            - 255.255.252.0

Network mask (bits)     - 22

Network mask (hex)      - FFFFFC00

Broadcast address       - 192.168.59.255

Cisco wildcard          - 0.0.3.255

Addresses in network    - 1024

Network range           - 192.168.56.0 - 192.168.59.255

Usable range            - 192.168.56.1 - 192.168.59.254

Also remove option route 192.168.58.0 255.255.255.0

share|improve this answer

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

add a comment | 

Your Answer

StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "2"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});

function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});


}
});

draft saved

draft discarded

Sign up or log in

StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});

Sign up using Google

Sign up using Facebook

Sign up using Email and Password

Post as a guest

Name

Email

Required, but never shown

StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f782800%2fopenvpn-with-ccd-not-reading-ifconfig-push-from-ccd%23new-answer', 'question_page');
}
);

Post as a guest

Name

Email

Required, but never shown

0

server 192.168.57.0 255.255.255.0
tells your server that it has to operate on 192.168.57.0/24 subnet so it will never assign addresses from 192.168.58.0/24 subnet. You have to change netmask in server option to server 192.168.56.0 255.255.252.0 so it will span to 192.168.58.0/24 subnet.

sipcalc 192.168.56.0 255.255.252.0

-[ipv4 : 192.168.56.0 255.255.252.0] - 0



[CIDR]

Host address            - 192.168.56.0

Host address (decimal)  - 3232249856

Host address (hex)      - C0A83800

Network address         - 192.168.56.0

Network mask            - 255.255.252.0

Network mask (bits)     - 22

Network mask (hex)      - FFFFFC00

Broadcast address       - 192.168.59.255

Cisco wildcard          - 0.0.3.255

Addresses in network    - 1024

Network range           - 192.168.56.0 - 192.168.59.255

Usable range            - 192.168.56.1 - 192.168.59.254

Also remove option route 192.168.58.0 255.255.255.0

share|improve this answer

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

add a comment | 

0

server 192.168.57.0 255.255.255.0
tells your server that it has to operate on 192.168.57.0/24 subnet so it will never assign addresses from 192.168.58.0/24 subnet. You have to change netmask in server option to server 192.168.56.0 255.255.252.0 so it will span to 192.168.58.0/24 subnet.

sipcalc 192.168.56.0 255.255.252.0

-[ipv4 : 192.168.56.0 255.255.252.0] - 0



[CIDR]

Host address            - 192.168.56.0

Host address (decimal)  - 3232249856

Host address (hex)      - C0A83800

Network address         - 192.168.56.0

Network mask            - 255.255.252.0

Network mask (bits)     - 22

Network mask (hex)      - FFFFFC00

Broadcast address       - 192.168.59.255

Cisco wildcard          - 0.0.3.255

Addresses in network    - 1024

Network range           - 192.168.56.0 - 192.168.59.255

Usable range            - 192.168.56.1 - 192.168.59.254

Also remove option route 192.168.58.0 255.255.255.0

share|improve this answer

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

add a comment | 

server 192.168.57.0 255.255.255.0
tells your server that it has to operate on 192.168.57.0/24 subnet so it will never assign addresses from 192.168.58.0/24 subnet. You have to change netmask in server option to server 192.168.56.0 255.255.252.0 so it will span to 192.168.58.0/24 subnet.

sipcalc 192.168.56.0 255.255.252.0

-[ipv4 : 192.168.56.0 255.255.252.0] - 0



[CIDR]

Host address            - 192.168.56.0

Host address (decimal)  - 3232249856

Host address (hex)      - C0A83800

Network address         - 192.168.56.0

Network mask            - 255.255.252.0

Network mask (bits)     - 22

Network mask (hex)      - FFFFFC00

Broadcast address       - 192.168.59.255

Cisco wildcard          - 0.0.3.255

Addresses in network    - 1024

Network range           - 192.168.56.0 - 192.168.59.255

Usable range            - 192.168.56.1 - 192.168.59.254

Also remove option route 192.168.58.0 255.255.255.0

share|improve this answer

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

sipcalc 192.168.56.0 255.255.252.0

-[ipv4 : 192.168.56.0 255.255.252.0] - 0



[CIDR]

Host address            - 192.168.56.0

Host address (decimal)  - 3232249856

Host address (hex)      - C0A83800

Network address         - 192.168.56.0

Network mask            - 255.255.252.0

Network mask (bits)     - 22

Network mask (hex)      - FFFFFC00

Broadcast address       - 192.168.59.255

Cisco wildcard          - 0.0.3.255

Addresses in network    - 1024

Network range           - 192.168.56.0 - 192.168.59.255

Usable range            - 192.168.56.1 - 192.168.59.254

share|improve this answer

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418

answered Jun 9 '16 at 9:40

Dariusz BączkowskiDariusz Bączkowski

22418