ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    VPN multiple IP address

    IT Discussion
    3
    17
    3.8k
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • scottalanmillerS
      scottalanmiller
      last edited by

      Let's back up for a moment... what is the purpose of using the different public IP addresses? What is the end goal?

      1 Reply Last reply Reply Quote 1
      • I
        iahr
        last edited by iahr

        Hi Scott,

        I am friend of Joy and we are planning to use two different IP for each our team will use different IP as it is our requirements on our project. Two different teams will use different IP.

        We add this
        client-config-dir /etc/openvpn/ccd
        route 10.8.2.0 255.255.255.0
        on /etc/openvpn/server.conf

        Then
        mkdir /etc/openvpn/ccd
        touch /etc/openvpn/ccd/user1
        touch /etc/openvpn/ccd/user2

        Edit /etc/openvpn/ccd/user1:
        ifconfig-push 10.8.0.1 10.8.0.2

        Edit /etc/openvpn/ccd/user2:
        ifconfig-push 10.8.2.1 10.8.2.2

        IP Tables:

        iptables -A FORWARD -s 10.8.0.0/24 -j ACCEPT
        iptables -A FORWARD -s 10.8.2.0/24 -j ACCEPT

        iptables -t nat -A POSTROUTING -s 10.8.1.0/24 -j SNAT --to-source 123.123.255.120
        iptables -t nat -A POSTROUTING -s 10.8.2.0/24 -j SNAT --to-source 123.123.255.121

        But when user2 login still getting 10.8.0.x IP.

        I think that the ccd config does not effecting.

        Thanks.

        scottalanmillerS 1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @iahr
          last edited by

          @iahr said:

          I am friend of Joy and we are planning to use two different IP for each our team will use different IP as it is our requirements on our project.

          Why is it a requirement? What are the two IPs doing that makes them unique? What is the actual end goal, a technical requirement doesn't make sense unless it is supporting a business need. What's the actual purpose of the two IP addresses?

          1 Reply Last reply Reply Quote 0
          • I
            iahr
            last edited by

            We have 2 different sites that will use different Public IP address with different restrictions. And those 2 different public IP address should be configure in our 1 VPN server.

            Thanks for the reply Scott.

            scottalanmillerS 1 Reply Last reply Reply Quote 0
            • scottalanmillerS
              scottalanmiller @iahr
              last edited by

              @iahr said:

              We have 2 different sites that will use different Public IP address with different restrictions. And those 2 different public IP address should be configure in our 1 VPN server.

              Thanks for the reply Scott.

              What kind of restrictions? Why can't you restrict just as much or more using a single IP address? I feel like you are creating complications and making this hard because of a misunderstanding of requirements. I'm not sure how two IPs could help here but having two makes things more complicated and complications make things fragile and risky. As a general rule in IT, you want to work towards simplification whenever possible and simple, elegant solutions are easier to set up, easier to maintain, easier to understand and, consequently, easier to secure. Since this is a VPN, and we are talking restrictions, security seems like it must be important.

              What is being restricted with the additional IP that couldn't be restricted on a single one?

              1 Reply Last reply Reply Quote 0
              • I
                iahr
                last edited by

                To make it simple, we need to use 2 different public IP address, since the website we will access are only allow 1 login account simultaneously for each public IP. For us to have 2 login simultaneous accounts we need to use 2 different Public IP address.

                Thanks.

                scottalanmillerS 1 Reply Last reply Reply Quote 0
                • scottalanmillerS
                  scottalanmiller @iahr
                  last edited by

                  @iahr said:

                  To make it simple, we need to use 2 different public IP address, since the website we will access are only allow 1 login account simultaneously for each public IP. For us to have 2 login simultaneous accounts we need to use 2 different Public IP address.

                  Thanks.

                  So you need two IPs for outbound, but how does that play into the VPN connection?

                  I 1 Reply Last reply Reply Quote 0
                  • scottalanmillerS
                    scottalanmiller
                    last edited by

                    The VPN connections show the IP addresses used to connect internally. This will not show up to a website. You could connect with a hundred VPN IP addresses and still look like just one IP to a website. Or you could have just one VPN IP and look like a hundred IPs to a website. There is no correlation.

                    1 Reply Last reply Reply Quote 0
                    • I
                      iahr @scottalanmiller
                      last edited by

                      @scottalanmiller We need to use different Public IP address. If we connect to our current setup of VPN we will use 123.123.255.120 (example Public IP) all users will use that Public IP. What we need is user1(authenticated to Daloradius) on will use Public IP of 123.123.255.120 and user2 (authenticated to Daloradius) must use 123.123.255.121. We need to different Public IP for us to login on our specific website simultaneously. Website login user only allow 1 public IP. If we login on website using same public IP we will not allow to login.

                      scottalanmillerS 1 Reply Last reply Reply Quote 0
                      • I
                        iahr
                        last edited by

                        If user1 will check his public IP address on www.whatismyipaddress.com user1 will see his Public IP is 123.123.255.120
                        If User2 will check his public IP address on www.whatismyipaddress.com user2 will see his Public IP is 123.123.255.121.

                        scottalanmillerS 1 Reply Last reply Reply Quote 0
                        • scottalanmillerS
                          scottalanmiller @iahr
                          last edited by

                          @iahr said:

                          If user1 will check his public IP address on www.whatismyipaddress.com user1 will see his Public IP is 123.123.255.120
                          If User2 will check his public IP address on www.whatismyipaddress.com user2 will see his Public IP is 123.123.255.121.

                          If that is coming from the VPN connection, something is wrong. The VPN should never expose its inner workings to the outside world. You have a misconfiguration somewhere that is exposing your VPN connection details. That's not good. What other data is leaking?

                          The site should be seeing the IP address that you come from, not the one you connect to. Having multiple VPNs does not enable that.

                          1 Reply Last reply Reply Quote 0
                          • scottalanmillerS
                            scottalanmiller @iahr
                            last edited by

                            @iahr said:

                            @scottalanmiller We need to use different Public IP address. If we connect to our current setup of VPN we will use 123.123.255.120 (example Public IP) all users will use that Public IP. What we need is user1(authenticated to Daloradius) on will use Public IP of 123.123.255.120 and user2 (authenticated to Daloradius) must use 123.123.255.121. We need to different Public IP for us to login on our specific website simultaneously. Website login user only allow 1 public IP. If we login on website using same public IP we will not allow to login.

                            I understand what you are saying, what I'm explaining is that you are confused as to how this works and that the VPN connections are not related to this.

                            1 Reply Last reply Reply Quote 0
                            • I
                              iahr
                              last edited by

                              We're don't need multiple VPN. What we want to do is we will use 2 different Public IP address. We are not confuse on how our VPN works, we cannot setup it if we don't know how it works. I Think for better explanation on what we need to do, please refer to this link.

                              https://forums.openvpn.net/topic8559.html

                              scottalanmillerS 2 Replies Last reply Reply Quote 0
                              • scottalanmillerS
                                scottalanmiller @iahr
                                last edited by scottalanmiller

                                @iahr said:

                                We are not confuse on how our VPN works, we cannot setup it if we don't know how it works.

                                Maybe we are missing something in translation. My understanding is that you are looking for mutiple IP addresses for the VPN to connect. Is that not the cse?

                                1 Reply Last reply Reply Quote 0
                                • scottalanmillerS
                                  scottalanmiller @iahr
                                  last edited by

                                  @iahr said:

                                  We're don't need multiple VPN. What we want to do is we will use 2 different Public IP address.
                                  https://forums.openvpn.net/topic8559.html

                                  Good, but this thread was about getting VPN with multiple IPs for each client, not multiple IPs going out, right? This link explains the same thing that I've been saying in this whole thread.

                                  1 Reply Last reply Reply Quote 0
                                  • I
                                    iahr
                                    last edited by

                                    Hi Scott,

                                    Yes, that's what I mentioned on my earlier messages. I think we got misunderstanding. Anyway, when I tried to follow the link I provided it seems that ccd is not taking effect, users define on ccd still getting 10.8.0.x IP instead of 10.8.2.x IP. I think user must take effect the assigning of internal IP address then you can route which public IP he will use.

                                    1 Reply Last reply Reply Quote 0
                                    • 1 / 1
                                    • First post
                                      Last post