Re: [Openvpn-devel] Netmask OpenVPN Server

2010-09-01 Thread Gert Doering
Hi, On Wed, Sep 01, 2010 at 10:38:01AM +0200, Eike Lohmann wrote: > We are working with static assignments and if the 2 networks are side by > side I can recompile the code and define a larger mask. > > We don't have client-2-client and didn't use the ifconfig-pool. In that case, all this doesn'

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-09-01 Thread Jan Just Keijser
Hi Eike, Eike Lohmann wrote: We are working with static assignments and if the 2 networks are side by side I can recompile the code and define a larger mask. Is this also working if I have 2 networks far away from each other (10.x and 192.168.x), with defining a 'all your base belong to us' netm

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-09-01 Thread Eike Lohmann
We are working with static assignments and if the 2 networks are side by side I can recompile the code and define a larger mask. Is this also working if I have 2 networks far away from each other (10.x and 192.168.x), with defining a 'all your base belong to us' netmask in the code e.g. 0.0.0.0 :)

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-09-01 Thread Gert Doering
Hi, On Wed, Sep 01, 2010 at 10:10:43AM +0200, Eike Lohmann wrote: > My mistake, didn't checked that you allready did my math. ;) > Do you have experience with changing"#define IFCONFIG_POOL_MIN_NETBITS > 16", is it realy so simple? I haven't tested it, but from looking at the code, it should work

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-09-01 Thread Eike Lohmann
My mistake, didn't checked that you allready did my math. ;) Do you have experience with changing"#define IFCONFIG_POOL_MIN_NETBITS 16", is it realy so simple? The best way for me would be to define 2 different /16 networks on one server/instance. E.g. 172.16.0.0/16 and 10.1.0.0/16 Is it possibl

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-08-31 Thread Gert Doering
Hi, On Tue, Aug 31, 2010 at 03:02:17PM +0200, Eike Lohmann wrote: > We are also using old openvpn clients with windows, there we have to use > /30 netmasks (4 ip's) and can only configure 4096 users. 65536 / 4 = 16000 :-) - a /16 pool holds 2^16 addresses, I already took that into account when a

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-08-31 Thread Eike Lohmann
We are also using old openvpn clients with windows, there we have to use /30 netmasks (4 ip's) and can only configure 4096 users. To handle the load on the machines we build a cluster with dynamic routing and yes, we are getting close to the /16 network limit. Am 31.08.2010 13:31, schrieb Ge

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-08-31 Thread Jan Just Keijser
Gert Doering wrote: Hi, On Tue, Aug 31, 2010 at 12:35:03PM +0200, Eike Lohmann wrote: In the past only /16 networks were possibel per openvpn instance. Is it now possibel to define larger networks or define 2x /16 networks on one openvpn instance? I assume that you're talking about t

Re: [Openvpn-devel] Netmask OpenVPN Server

2010-08-31 Thread Gert Doering
Hi, On Tue, Aug 31, 2010 at 12:35:03PM +0200, Eike Lohmann wrote: > In the past only /16 networks were possibel per openvpn instance. > Is it now possibel to define larger networks or define 2x /16 networks > on one openvpn instance? I assume that you're talking about this error message: --se