How to specify a pool of IPs to use in client specific overrides?
-
Hello,
I am using OpenVPN with success, assigning a static IP for each user that I allow into my network, so I can manage the policies with more ease.
For example, this is what my config looks like when it comes to the client specific overrides:USER_A
ifconfig-push 192.168.8.2 255.255.255.0; push "route 192.168.5.0 255.255.255.0"USER_B
ifconfig-push 192.168.8.3 255.255.255.0; push "route 192.168.6.0 255.255.255.0"However, the problem is that I now need to allow, let's say USER_C, to connect from three different devices, often all three at the same time.
I assume that they can't possibily have the same IP, otherwise pfsense will not know how to treat the connections differently, so I belive I'm supposed to assign a pool of addresses, for example:USER_B
ifconfig-push 192.168.8.4 255.255.255.0; ifconfig-push 192.168.8.5 255.255.255.0; ifconfig-push 192.168.8.6 255.255.255.0; push "route 192.168.7.0 255.255.255.0"However this does not seem to work.
Could someone suggest a working solution for this problem?Thank you
-
@Kei:
Could someone suggest a working solution for this problem?
The correct answer is: Three different machine accounts or certificates.
There isn't a good way (or perhaps any way) to accommodate one client with three static addresses in the way you describe. It's far easier and far more secure to configure them one account per device if they must use them simultaneously.
