Restrict Access to OpenVPN by IP Address

[anontemp123]

I need to restrict which IP addresses can connect to my OpenVPN server. If I can do a reverse lookup on the IP and restrict by hostname, that's even better.

I'm looking for something like this example from RMerlin, but for an OpenVPN server running on the router, not for port forwarding. I'm thinking it should be similar, but so far my guesses have failed.

What I am doing right now is using two ASUS routers: One "main" router with port forwarding rules, and another router behind that router that acts as just an OpenVPN server.

Thanks for any ideas.

 

[mattiL]

OpenVPN Servers > Advanced Settings > "Allow only specified clients"
Might work for you.

 

[anontemp123]

My firmware can only run a single OpenVPN server, and it's under the "VPN Server" section. There's no Advanced Settings under there, either. What router/firmware are you running?

 

[mattiL]

I'm running Merlin 378.55 on RT-AC87

Look at the attached picture, the dropdown menu General can also show Advanced Settings:

 

[sfx2000]

Best to do this thru iptables, one can create a ruleset there that does what you're looking for...

Some basics at the following link - https://openvpn.net/index.php/open-source/documentation/howto.html#policy

Means jumping into the terminal

 

[anontemp123]

Thanks for the replies!

mattiL, only one of my routers runs Merlin, so I updated that and put that as my VPN server for now. I'll have to spend more time figuring out how to do this on my other Padavan routers.

sfx2000, that example is for something else than what I'm trying to accomplish. I want the router to block all connections to UDP 1194 on the WAN side, except from a single public IP address.