Community discussions

MikroTik App
 
akarpas
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Mar 20, 2018 4:46 pm

Lock VPN user to static IP

Fri May 12, 2023 12:18 pm

What would be the best option to make sure that VPN user is using statically assigned IP address to his VPN secret. In case user edit VPN client and puts other IP the Mikrotik would disable VPN or would not allow to connect.
 
User avatar
own3r1138
Long time Member
Long time Member
Posts: 680
Joined: Sun Feb 14, 2021 12:33 am
Location: Pleiades
Contact:

Re: Lock VPN user to static IP

Fri May 12, 2023 12:50 pm

I think user-man with an attribute of framed-ip-address=x.x.x.x for that user.
If the number of users is not large and you don't want to set up any Radius, you could also use remote-address=x.x.x.x.
 
akarpas
Member Candidate
Member Candidate
Topic Author
Posts: 177
Joined: Tue Mar 20, 2018 4:46 pm

Re: Lock VPN user to static IP

Fri May 12, 2023 5:16 pm

I think user-man with an attribute of framed-ip-address=x.x.x.x for that user.
If the number of users is not large and you don't want to set up any Radius, you could also use remote-address=x.x.x.x.
yep this is what I used to set remote address, and created a firewall rule what that address may access on the network, but the user can go to VPN interface set up on PC and manually change IP address within IPv4 settings and I believe it will work and this way user goes around the firewall rule.

Who is online

Users browsing this forum: ItchyAnkle, kazza, RobertsN, Soleous75 and 67 guests