Client-specific configuration – CCD files

In a setup where a single server can handle many clients, it is sometimes necessary to set per-client options that overrule the global options, or to add extra options to a particular client. The option client-config-dir is very useful for this. It allows the VPN administrator to assign a specific IP address to a client, in order to push specific options such as a DNS server to a particular client or to temporarily disable a client altogether. This option is also vital if you want to route a subnet from the client side to the server side, as we will see later on.

A client-config-dir or CCD file can contain the following options:

• push: This is useful for pushing DNS and WINS servers, routes, and so on

• push-reset: This is useful to overrule global push options

• iroute: This is useful for routing IPv4 client subnets to the server

• iroute-ipv6: This is useful for routing IPv6 client subnets to the server

• ifconfig-push: This is useful for assigning a specific...