Ok I know what was wrong:
- I had more than one
VPNClient with the same
IPAddress. So I gave each of them a static
Define a directory where the client scripts should be stored , e.g. /etc/openvpn/staticclients and create the directory
Add this directory as option to your openvpn configfile at the server:
For each client you have to create a file. The filename must match the
common name attribute that was specified at the certificate of the client. This command gets the CN from the computers certificate:
This example pushs the
IPAddress 10.1.134.110/10.1.134.109 to the Client with the
common name TESTCLIENT and also pushes a additional route for subnet 10.1.135.0.
ifconfig-push 10.1.134.110 10.1.134.109
push "route 10.1.135.0 255.255.255.0 10.1.134.62"
sysctl -w net.ipv4.ip_forward=1
iptables -t nat -A PREROUTING -p tcp --dport 28006 -j DNAT --to 10.1.134.110