Static OpenVPN remote address for AAA users

RouterOS General
1

Hi,

I’m testing OpenVPN on RouterOS 7.17.1 version, it’s working excellent.
Push Routes was a great improvement to RouterOS.

I’m using radius (AAA) to authenticate OpenVPN users, it’s also working very well.

The problem is: when a user is created locally to lease a static IP, it blocks the radius user, RouterOS tries to use local password for authentication.

Is there a workaround to that? My goal is to authenticate user via radius and override Remote Address (each user would have his/her exclusive /32)
This way, I’ll send only those /32 prefixes from OpenVPN Server to my backbone, making it possible to have multiple servers without collision between allocations, for high availability as well facilitate auditing of logins made on backbone devices.

2

The rule is:
ANY configuration en LOCAL has higher priority than in REMOTE.

So, if you want to has priorization in Auth servers you has to deploy several AAA servers with its own priority.