Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    Client Specific Overrides - Range of Local IP address

    Scheduled Pinned Locked Moved OpenVPN
    4 Posts 2 Posters 323 Views 2 Watching
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • P Offline
      pwood999
      last edited by pwood999

      I have got client overides working well for several VPN users, but at the moment I had to use multiple /32 addresses separated with commas.

      Is there any way to specify an IP Range instead such as 172.21.10.221-229

      I did try using 172.21.10.192/27 but that doesn't include .223 upwards and I don't want to use a /26 because it's too large.

      This is clunky for even 6-8 IP addresses:
      e8eb6deb-fce6-4805-85a2-efeca309b9f6-image.png

      V 1 Reply Last reply Reply Quote 0
      • V Offline
        viragomann @pwood999
        last edited by

        @pwood999
        IP ranges cannot be specified here. I've read, that you can state aliases in the server config and in an alias, you can specify IP ranges. But don't know if this can also be done in the CSO and never tried it myself.
        And if, the alias is resolved into single IPs as well, when it's applied.

        However, you can express your range with multiple subnets, e.g. "172.21.10.220/30,172.21.10.224/29", which then goes from 172.21.10.220 to .231.

        P 1 Reply Last reply Reply Quote 1
        • P Offline
          pwood999 @viragomann
          last edited by

          @viragomann That's a good idea. Will try those two. Also will try the Alias option in case I need separate groups of IP's.

          Pete

          1 Reply Last reply Reply Quote 0
          • P Offline
            pwood999
            last edited by

            Alias using a range of IP is accepted by the GUI, but doesn't seem to work as OpenVPN local IP's in Client specific.

            1 Reply Last reply Reply Quote 0
            • First post
              Last post
            Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.