NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
dfilip
Jul 01, 2019Guide
OpenVPN w/BR500 and Static IP
I have OpenVPN working from my Cloud (AWS) server to my local LAN network through a BR500 router:
[AWS Cloud Server] <--> [Public Internet] <--> [BR500] <--> [Local LAN Servers]
Howev...
schumaku
Jul 01, 2019Guru - Experienced User
Check ifconfig-push
„Push virtual IP endpoints for client tunnel, overriding the –ifconfig-pool dynamic allocation.” https://openvpn.net/index.php/open-source/documentation/manuals/65-openvpn-20x-manpage.html
===
–ifconfig-push local remote-netmaskPush virtual IP endpoints for client tunnel, overriding the –ifconfig-pool dynamic allocation.The parameters local and remote-netmask are set according to the –ifconfig directive which you want to execute on the client machine to configure the remote end of the tunnel. Note that the parameters local and remote-netmask are from the perspective of the client, not the server. They may be DNS names rather than IP addresses, in which case they will be resolved on the server at the time of client connection.
This option must be associated with a specific client instance, which means that it must be specified either in a client instance config file using –client-config-dir or dynamically generated using a –client-connect script.
Remember also to include a –route directive in the main OpenVPN config file which encloses local, so that the kernel will know to route it to the server’s TUN/TAP interface.
OpenVPN’s internal client IP address selection algorithm works as follows:
1 — Use –client-connect script generated file for static IP (first choice).
2 — Use –client-config-dir file for static IP (next choice).
3 — Use –ifconfig-pool allocation for dynamic IP (last choice).
===
dfilip
Jul 01, 2019Guide
Yes, I originally looked at this, but the problems is that it requires me dropping a file into the "CCD" (Client Configuration Directory?) directory of the OpenVPN server that matches the name or remote IP or certificate name of the OpenVPN client. The challenge here is that the BR500 is the OpenVPN server ... and I don't know of any way to drop a client-speciifc file into the BR500's OpenVPN configuration directory???
Related Content
NETGEAR Academy

Boost your skills with the Netgear Academy - Get trained, certified and stay ahead with the latest Netgear technology!
Join Us!