Virtual IP pool not using all /25 addresses for Remote Access>SSL

Hi, Koen, and welcome to the UTM Community!

The way OpenVPN works, you need to have a larger subnet than /25 if you want to accommodate more than 30 simultaneous connections.

Cheers - Bob

Bob,

Thanks for the reply.

Could you elaborate on what you mean by 'the way OpenVPN' works? Not sure I understand why just 30 random IP addresses would be assigned to clients out of the 126 that we have available in our Virtual IP pool.

Regards,

Koen

Bob,

Thanks for the reply.

Could you elaborate on what you mean by 'the way OpenVPN' works? Not sure I understand why just 30 random IP addresses would be assigned to clients out of the 126 that we have available in our Virtual IP pool.

Regards,

Koen

every connection uses a /30 network.

2 connection endpoints, network and broadcast address

Thx.

That would indeed make sense and I apologise as I overlooked that the VPN session actually uses a /30.

Hey, Koen, no apology - you're probably now in the 1% of UTM admins that knows that!

Cheers - Bob