vpn problem

Discussion in 'Server Operation' started by pawan_lal, Jul 4, 2009.

  1. pawan_lal

    pawan_lal New Member

    Hi,
    i had configured open vpn on fedora n its working fine. i had created 3 clients certificates all of 3 clients can easily connect to openvpn but when i connect all 3 clients at a same time from diffrent location than problem arises.
    openvpn is only able to give ip to only one client 10.8.0.6 and other two clients cant connect to vpn.
    giving u the server and client.conf configuration.

    #####################################################################serserver.conf

    port 1194
    proto udp
    dev tun
    daemon

    ca /etc/openvpn/keys/ca.crt
    cert /etc/openvpn/keys/server.crt
    key /etc/openvpn/keys/server.key # This file should be kept secret
    dh /etc/openvpn/keys/dh1024.pem

    server 10.8.0.0 255.255.255.0
    ifconfig-pool-persist ipp.txt
    push "route 192.168.1.0 255.255.255.0"

    client-to-client

    keepalive 10 120
    user nobody
    persist-key
    persist-tun
    status /var/log/openvpn-status.log
    log /var/log/openvpn.log
    log-append /var/log/openvpn.l

    #####################################################################

    #####################################################################
    client.conf

    client
    float

    dev tun

    proto udp

    remote abc.com 1194

    resolv-retry infinite

    nobind

    user nobody

    persist-key
    persist-tun

    ca ca.crt
    cert client2.crt
    key client2.key

    verb 3
    #####################################################################

    Regards
    PAWAN
     
  2. dipeshmehta

    dipeshmehta Member

    Each client needs a seperate crt/key set, whereas ca.crt would be same for all. Have you created seperate keys?

    otherwise, put
    Code:
    duplicate-cn
    into your server.conf. This would allow concurrent instances using the same certificate/key.

    Hope this helps.

    Dipesh
     

Share This Page