Page 1 of 1

prevent multiple login for openvpn client

Posted: Sun May 11, 2014 10:05 am
by younix
I have a softether vpn server.for all account of a group, I want to limit multiple login to 1 user per account.

I have set the group's security policy like this :
"maximum number of multiple logins = 1"

all things go right but when 2 users connect with openvpn, both of them can connect with one account.

How can I handle this issue ?

Re: prevent multiple login for openvpn client

Posted: Sun May 11, 2014 3:36 pm
by dnobori
Try connection from different two global IP addresses.

Re: prevent multiple login for openvpn client

Posted: Mon May 12, 2014 2:15 pm
by younix
but i want to handle this issue according to this fact that all users always have a global IP.

Re: prevent multiple login for openvpn client

Posted: Wed May 14, 2014 5:41 pm
by younix
i think it is a software bug. because when i limit multiple login for each user,

i have achive my goal. :)

Re: prevent multiple login for openvpn client

Posted: Thu Nov 06, 2014 5:53 am
by weiyu99
how do you make it work? I have created a group with "max login set to 1" and a user inside the group with "max login set to 1" but still, user can do multiple login, looks like the server is not honoring the security polity.

I'm running with latest vpn server release.

thanks,
Dennis

Re: prevent multiple login for openvpn client

Posted: Tue Nov 11, 2014 7:02 am
by thisjun
What client did you use?

Re: prevent multiple login for openvpn client

Posted: Sat Nov 29, 2014 9:14 am
by shomo
Hello,
I seem to have the same problem.
The policy only works if applied to each user individually. But when applied to the group all of the users in that group can still make multiple logins.
It would be a pain in the ass to set the policy on each user so it would be great if there was a fix.

I'm using Softether VPN Server v4.11 Build 9506 on a x64 VPS.

Re: prevent multiple login for openvpn client

Posted: Thu Dec 11, 2014 8:10 am
by thisjun
User policy prevails against group policy.

Re: prevent multiple login for openvpn client

Posted: Sat Dec 13, 2014 6:18 am
by shomo
thisjun wrote:
> User policy prevails against group policy.

I know that. But I need to be able to set the policy in the group so I won't have to set it for each user.

Re: prevent multiple login for openvpn client

Posted: Thu Dec 25, 2014 6:49 am
by thisjun
Delete user's policy.

Re: prevent multiple login for openvpn client

Posted: Thu Dec 25, 2014 5:38 pm
by danymogh
thisjun wrote:
> User policy prevails against group policy.
He's right this Rule work pretty much like anti virus programs.

if you Set both User Policy and Group policy then User policy has a higher priority so it will ignore the Limit. You need to Work only with Group policy and disable User policy

Re: prevent multiple login for openvpn client

Posted: Mon Feb 22, 2016 6:37 pm
by roxy
I'm using SoftEther VPN Server 4,19 build 9599 64 bit on Windows 2012 server. Only SoftEther VPN Client honors the "Maximum number of multiples logins" = 1.
OpenVPN like clients (OpenVPN, Securepoint OpenVPN) make connection also if one connection is just on,

Maximum numer of multiple logins does not work for these clients, also setings user Policy.

Re: prevent multiple login for openvpn client

Posted: Fri Mar 25, 2016 7:21 am
by thisjun
Could you tell me about reproduction condition?

Re: prevent multiple login for openvpn client

Posted: Fri Mar 25, 2016 1:52 pm
by roxy
On a PC connect a VPN using SoftEther connect to the some server (configured with max 1 connection per user as group policy) with OpenVPN client on Android smatphone. Connection take place without restriction.

Re: prevent multiple login for openvpn client

Posted: Fri May 20, 2016 6:40 am
by thisjun
Try connection from different two global IP addresses.

Re: prevent multiple login for openvpn client

Posted: Tue May 24, 2016 11:00 am
by roxy
This is a strong restriction. How if more users connect from the same network, some public IP (as in natted networks) ?

Re: prevent multiple login for openvpn client

Posted: Thu Jun 02, 2016 6:06 am
by thisjun
OpenVPN doesn't send unique ID, so VPN server can't identify clients which have same IP address.

Re: prevent multiple login for openvpn client

Posted: Thu Feb 09, 2017 2:58 pm
by Justafan
Any way to do this also with FREERADIUS?

The users are sharing their login details, and have up to 50 users per login.

Re: prevent multiple login for openvpn client

Posted: Thu Feb 23, 2017 7:36 am
by thisjun
SoftEther doesn't support Radius Accounting.

Re: prevent multiple login for openvpn client

Posted: Wed Dec 12, 2018 11:48 pm
by naabvpn
Still have not found a way to troubleshoot multiple devices using a username on an ip?
OpenVPN users connect to Android infinitely :(

Re: prevent multiple login for openvpn client

Posted: Thu Dec 13, 2018 3:12 pm
by naabvpn
I use Frei Radius.
And can easily identify duplicate users. Even with the ip subscriber.
Using the number of active sessions a username
OK ! Why does not this work on softether