> I shall assume that your question is "how do I tell the client *not* to try
> sticking to the last IP used?". ;-)

Yes!
 
> I don't see such an option in the docs (for 2.6, to be precise), but let me
> ask a question for clarification: Does your setup answer requests to a
> now-disabled IP with some explicit denial (ICMP UNREACHABLE, RST, whatever),

No, since the machine might still be active and serving existing
openvpn sessions (basically we'd like to keep serving existing clients
and disallow new clients)

-- 
Ralf Hildebrandt
Charité - Universitätsmedizin Berlin
Geschäftsbereich IT | Abteilung Netz | Netzwerk-Administration
Invalidenstraße 120/121 | D-10115 Berlin

Tel. +49 30 450 570 155
ralf.hildebra...@charite.de
https://www.charite.de

Attachment: smime.p7s
Description: S/MIME cryptographic signature

_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to