OpenVPN Private IP address conflict

jpvonhemel

Hello,

I have used OpenVPN successfully home for several years on my SG-2440. The only problem I had was when I was connected to a network with the same 192.168.1.0 /24 subnet as my pfsense lan. When I tried to access a local client at my home, it must have gotten confused between the two common subnets.

I am setting up an XG-7100 and I am considering using a different private address. It makes sense to use the most obscure one I can think of. Is this a security through obscurity concern, or just trying to minimize conflicts? Is this the best way to try to avoid conflicts or is there another solution?

Thanks,
Jerold

Pippin

Please see here:
https://community.openvpn.net/openvpn/wiki/AvoidRoutingConflicts
.

Is this a security through obscurity concern, or just trying to minimize conflicts?

The latter.

JKnott

@jpvonhemel

I used to have that problem, when I was doing a lot of travelling with work. For that reason, I moved my home network to the 172.16.0.0 block. I have only once seen that used elsewhere. Many people don't bother changing the subnet, when setting up their network, so there are a lot that are the same. Even still, with 192.168.0.0 /24, there are only 256 possibilities.

jpvonhemel

@JKnott @Pippin Thank you very much! I have been putting this off due to a lot of dhcp reservations, but find and replace, in the xml export, reimport and reboot made it fairly easy to migrate to a subnet less likely to cause me conflict.