Technical data

4. Packages

• IP address may not be used for any local network device.

• IP address may not belong to any network routed by IP_ROUTE_x.

• IP address may not belong to any network routed by ISDN_CIRC_ROUTE_x.

• IP address may not belong to any network routed by CIPE_ROUTE_x.

• IP address may not belong to any network routed by OPENVPN_ROUTE_x.

• IP address may not belong to any network used or routed by ﬂi4l in any other way.

As you see VPN IP addresses can’t be used anywhere else. Before beginning to conﬁgure

OpenVPN you should look for an unused net in both local and remote address ranges.

It should belong to private address ranges (see http://ftp.univie.ac.at/netinfo/rfc/

rfc1597.txt).

OPENVPN_x_LOCAL_VPN_IP Default: OPENVPN_x_LOCAL_VPN_IP=”

This setting is only valid if OPENVPN_x_TYPE (Page 165) is set to ’tunnel’ for this Open-

VPN connection.

IP address for the local OpenVPN device tunX. Same restrictions as in

OPENVPN_x_REMOTE_VPN_IP (Page 166) apply here.

By the way, it is possible to use the same IP address as in OPENVPN_x_LOCAL_VPN_IP for

all local OpenVPN connections. This enables a host host to use the same IP address in

all VPNs. Packet ﬁlter rules are drastically easier to conﬁgure this way.

OPENVPN_x_IPV6 Default: OPENVPN_x_IPV6=’no’

This enables native IPv6 support in OpenVPN. Consider this as an experimental feature

because of the code being brandnew. Of course OPT_IPV6 has to be activated and

conﬁgured as well then. For OPENVPN_x_IPV6=’no’ and/or OPT_IPV6=’no’ all relevant

variables are ignored.

ATTENTION!!! These settings are not checked for overlapping with other parts of the

conﬁguration! This applies to OPENVPN_x_LOCAL_VPN_IPV6, OPENVPN_x_REMOTE_VPN_IPV6

and OPENVPN_x_ROUTE_x.

OPENVPN_x_REMOTE_VPN_IPV6 Default: OPENVPN_x_REMOTE_VPN_IPV6=”

For IPv6 the same restrictions apply as for OPENVPN_x_REMOTE_VPN_IP (Page 166).

OPENVPN_X_REMOTE_IPV6='FD00::1'

OPENVPN_x_LOCAL_VPN_IPV6 Default: OPENVPN_x_LOCAL_VPN_IPV6=”

For IPv6 applies the same as for OPENVPN_x_LOCAL_VPN_IP (Page 167). If no subnet is set

/64 will be used as a default.

OPENVPN_X_LOCAL_IPV6='FD00::2/112'

167