How subnet conflicts are resolved? about openvpn HOT 5 OPEN

Hi, your sample CCD files do not truly match what you are saying.
push "route X Y" is telling the client to add a route of what should be sent to the VPN.
With your CCD files above you are telling all three clients to send traffic for those networks to the VPN server.

Now, what will the VPN server do with this traffic? Either this traffic has to go somewhere else (look up the system routing table) or should be redirected to another client.
In the latter case (which is what I think you are referring to), the server needs directives called iroutes and that should be added to the CCD file of the client responsible for that network.

If multiple clients are responsible for the same network, I believe simply keeps the directive of the last client that connected to the server (basically it overwrites any previous directive).

Therefore it's up to you to resolve the conflict somehow.

OTOH if you are using DCO on Linux, iroutes are implemented via system routing table too. Maybe there you can do some tricks and allow similar routes to coexists.

from openvpn.

@ordex
Sorry, the configuration I gave was wrong. Corrected. But you understand that right, all I want to do is instruct openvpnServer to redirect to the client I really want to access, how do I do that? Don't have a clue, do you have any good ideas?

from openvpn.

The clients will be assigned unique IP addresses on the VPN interface anyway. So if you want to "access the client", use these.

If you want to access something on the LAN side of the client, and multiple clients use the same subnet, this is not something OpenVPN can fix for you - iroutes must be unique, or it will pick one or the other (first client to connect, or last client to connect, not sure, but "not determined by config").

from openvpn.

@balck-paint maybe you should start from scratch and think about the logic steps you'd need to determine what exact LAN you want to connect to. From there, you may be able to figure out how to implement that on your side.

You wrote "what my c really wants to access is the subnet of client B", but this is not something that can be converted to machine rules. What about other clients? Will the target LAN change over time? if yes, based on what?
After answering all these questions you may be able to start thinking the "how".

This said, I hardly believe OpenVPN alone can help you here.

from openvpn.

from openvpn.