On Mon, Aug 7, 2023 at 1:58 PM, Jochen Bern<jochen.b...@binect.de> wrote:   
On 06.08.23 22:41, Jason Long via Openvpn-users wrote:
> Hello,Any idea?I would be grateful if someone could guide me.
> 
> On Wed, Aug 2, 2023 at 11:17 PM, Jason Long via 
> Openvpn-users<openvpn-users@lists.sourceforge.net> wrote:  Hello,To use 
> OpenVPN with a NIC that has multiple IP addresses set on it, I need to use 
> the following statement in the server configuration file:
> Local "Virtual IP"
> But, when I use the following firewall rules and specify the virtual NIC, 
> OpenVPN network card and IP range, is there still a need for Local "Virtual 
> IP"?

The "local" statement is *necessary* when and if the same port as in the 
OpenVPN config needs to be used somewhere else as well (be it by another 
OpenVPN instance, or some entirely different software), so as to use 
different *IP*-and-port combos instead. The conflict occurs as soon as 
the second software tries to start *LISTENing* on that port, with *no 
packets* being sent yet. Hence, your iptables setup is entirely 
irrelevant there.

Kind regards,
-- 
Jochen Bern
Systemingenieur

>Binect GmbH

Hello,Thank you so much.So, the "local" statement is only applicable when the 
OpenVPN servers use the same ports. So, if an OpenVPN server with several 
different IP addresses uses different ports in its settings, there is no need 
to use the "local" statement. Am I right?
Why my iptables rules are irrelevant?
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users
  
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to