Softethervpn: Where can I assign a static IP to vpn users?

Created on 27 Jan 2014  路  4Comments  路  Source: SoftEtherVPN/SoftEtherVPN

I want to set up like this: PC1,PC2,PC3 -> SEVPNserver(123.123.123.123/wan IP)

I don't want to connect SEVPNserver's network(lan IP 10.10.50.X range)
but I want to connect to SEVPNserver itself / VPN users.

ex.
SEVSERVER 10.10.20.1
PC1(vpn connected) 10.10.20.22
PC1(vpn connected) 10.10.20.27

[ALLOW]
10.10.20.22 -> 10.10.20.1:8080 = 127.0.0.1:8080(in server side)
10.10.20.22 -> 10.10.20.1:465 = 127.0.0.1:465(in server side)
10.10.20.22 -> 10.10.20.27 (pc-to-pc)
10.10.20.22 -> 120.130.140.150 (to internet, just like a router)

[DENY]
10.10.20.22 -> 10.10.50.25

The question is,

  1. Where can I set a static IP for each VPN user? (ex. 10.10.20.x range for VPN)
  2. If can't, should I use SecureNAT's DHCP instead?

server has 2 NIC card.
one is 10.10.1.2 WAN(Global IP: 123.123.123.123)
second is 10.10.50.1 LAN

feature question

All 4 comments

  1. If you are using VPN Client, you can use your own DHCP server to assign static IP addresses to each computer, by using unique virtual MAC addresses of VPN clients.
  2. You can also define access-list entries on the Virtual Hub. An entry can have the username field as the matching condition. Then you can allow the specific access to the specific user.

So there's no option to force user to use assigned IP address.
User(client) can change their vpn IP address to anything. Wow.

PC1: VPN IP: 10.10.20.22 | PC2: VPN IP: 10.10.20.222
PC1 disconnected -> PC2 change its IP address to .22 -> Connect to the VPN as PC1

Isn't this a positive attack?
It'll be more secure if I can assign an vpn IP address to each user in "manage Virtual Hub - Manage Users" section
and filter(drop) everything when the user change its IP address to non-assigned one.

You can force the user to use DHCP-assigned IP address by enabling the Enforce DHCP Allocated IP Addresses (IPv4) policy.

The question was answered correctly. The user does not exist anymore on github. I'd like to close this issue.

Was this page helpful?
0 / 5 - 0 ratings