pfSense

I am currently running my pfsense install with this patch:

diff --git a/etc/inc/openvpn.inc b/etc/inc/openvpn.inc
index 927a3ec..1103976 100644
--- a/etc/inc/openvpn.inc
+++ b/etc/inc/openvpn.inc
@@ -642,9 +642,9 @@ function openvpn_reconfigure($mode, $settings) {
                        case 'server_user':
                        case 'server_tls_user':
                                if (!empty($ip) && !empty($mask)) {
-                                       $conf .= "server {$ip} {$mask}\n";
+                                       $conf .= "#server {$ip} {$mask}\n";
                                        if (is_ipaddr($ipv6)) {
-                                               $conf .= "server-ipv6 {$ipv6}/{$prefix}\n";
+                                               $conf .= "#server-ipv6 {$ipv6}/{$prefix}\n";
                                        }
                                        $conf .= "client-config-dir {$g['varetc_path']}/openvpn-csc\n";
                                } else {

and this as additional server options:

mode server
ifconfig 172.22.2.1 255.255.255.0
ifconfig-pool 172.22.2.2 172.22.2.100 255.255.255.0
push "route-gateway 172.22.2.1" 
push "topology subnet" 

This allows me to dynamically assign IPs from 172.22.2.2-172.22.2.100 and use stuff like

ifconfig-push 172.22.2.130 255.255.255.0

Hmm, I guess the easiest option would be to just remove the "address pool setting" and make "tunnel network optional" -- this would allow for truly advanced configurations (Obviously tunnel networks should get a big warning that you should only leave this empty when you know what you are doing). What do you think? If you tell me the way to go forward I can try to wipe together a patch.

I have expanded the server directive as per the openvpn manpage: https://github.com/apollo13/pfsense/commit/137498be7fe113802cb1548b47f83778ade84eb1 -- what do you think? IPv6 is still missing, I am not really a PHP user, so I have yet to read up on the IPv6 library (also I have no IPv6 network to test ;)).

Hi, I do not think this is a duplicate and I just ran into this again. I actually want to be able to specify "nopool" for the server.

I have added a PR at https://github.com/pfsense/pfsense/pull/4621 and restored the "pool_enable" functionality.

I tested the patch, and it works as expected. I would consider the wording. Steve suggested naming that option 'Auto Address Pool' instead of 'Address Pool'. In my opinion we can simply name it 'nopool'.

I usually find negated settings hard to read. But let me know what you prefer or simply push the edits yourself into my branch.