prevent multiple login for openvpn client

Post your questions about SoftEther VPN software here. Please answer questions if you can afford.
Post Reply
younix
Posts: 3
Joined: Sun May 11, 2014 9:56 am

prevent multiple login for openvpn client

Post by younix » Sun May 11, 2014 10:05 am

I have a softether vpn server.for all account of a group, I want to limit multiple login to 1 user per account.

I have set the group's security policy like this :
"maximum number of multiple logins = 1"

all things go right but when 2 users connect with openvpn, both of them can connect with one account.

How can I handle this issue ?

dnobori
Posts: 228
Joined: Tue Mar 05, 2013 10:04 am

Re: prevent multiple login for openvpn client

Post by dnobori » Sun May 11, 2014 3:36 pm

Try connection from different two global IP addresses.

younix
Posts: 3
Joined: Sun May 11, 2014 9:56 am

Re: prevent multiple login for openvpn client

Post by younix » Mon May 12, 2014 2:15 pm

but i want to handle this issue according to this fact that all users always have a global IP.

younix
Posts: 3
Joined: Sun May 11, 2014 9:56 am

Re: prevent multiple login for openvpn client

Post by younix » Wed May 14, 2014 5:41 pm

i think it is a software bug. because when i limit multiple login for each user,

i have achive my goal. :)

weiyu99
Posts: 3
Joined: Tue Sep 24, 2013 1:03 pm

Re: prevent multiple login for openvpn client

Post by weiyu99 » Thu Nov 06, 2014 5:53 am

how do you make it work? I have created a group with "max login set to 1" and a user inside the group with "max login set to 1" but still, user can do multiple login, looks like the server is not honoring the security polity.

I'm running with latest vpn server release.

thanks,
Dennis

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Tue Nov 11, 2014 7:02 am

What client did you use?

shomo
Posts: 2
Joined: Sat Nov 29, 2014 9:06 am

Re: prevent multiple login for openvpn client

Post by shomo » Sat Nov 29, 2014 9:14 am

Hello,
I seem to have the same problem.
The policy only works if applied to each user individually. But when applied to the group all of the users in that group can still make multiple logins.
It would be a pain in the ass to set the policy on each user so it would be great if there was a fix.

I'm using Softether VPN Server v4.11 Build 9506 on a x64 VPS.

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Thu Dec 11, 2014 8:10 am

User policy prevails against group policy.

shomo
Posts: 2
Joined: Sat Nov 29, 2014 9:06 am

Re: prevent multiple login for openvpn client

Post by shomo » Sat Dec 13, 2014 6:18 am

thisjun wrote:
> User policy prevails against group policy.

I know that. But I need to be able to set the policy in the group so I won't have to set it for each user.

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Thu Dec 25, 2014 6:49 am

Delete user's policy.

danymogh
Posts: 6
Joined: Tue Dec 23, 2014 4:03 pm

Re: prevent multiple login for openvpn client

Post by danymogh » Thu Dec 25, 2014 5:38 pm

thisjun wrote:
> User policy prevails against group policy.
He's right this Rule work pretty much like anti virus programs.

if you Set both User Policy and Group policy then User policy has a higher priority so it will ignore the Limit. You need to Work only with Group policy and disable User policy

roxy
Posts: 25
Joined: Sun Feb 21, 2016 10:34 am

Re: prevent multiple login for openvpn client

Post by roxy » Mon Feb 22, 2016 6:37 pm

I'm using SoftEther VPN Server 4,19 build 9599 64 bit on Windows 2012 server. Only SoftEther VPN Client honors the "Maximum number of multiples logins" = 1.
OpenVPN like clients (OpenVPN, Securepoint OpenVPN) make connection also if one connection is just on,

Maximum numer of multiple logins does not work for these clients, also setings user Policy.

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Fri Mar 25, 2016 7:21 am

Could you tell me about reproduction condition?

roxy
Posts: 25
Joined: Sun Feb 21, 2016 10:34 am

Re: prevent multiple login for openvpn client

Post by roxy » Fri Mar 25, 2016 1:52 pm

On a PC connect a VPN using SoftEther connect to the some server (configured with max 1 connection per user as group policy) with OpenVPN client on Android smatphone. Connection take place without restriction.

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Fri May 20, 2016 6:40 am

Try connection from different two global IP addresses.

roxy
Posts: 25
Joined: Sun Feb 21, 2016 10:34 am

Re: prevent multiple login for openvpn client

Post by roxy » Tue May 24, 2016 11:00 am

This is a strong restriction. How if more users connect from the same network, some public IP (as in natted networks) ?

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Thu Jun 02, 2016 6:06 am

OpenVPN doesn't send unique ID, so VPN server can't identify clients which have same IP address.

Justafan
Posts: 7
Joined: Tue Jan 03, 2017 8:32 pm

Re: prevent multiple login for openvpn client

Post by Justafan » Thu Feb 09, 2017 2:58 pm

Any way to do this also with FREERADIUS?

The users are sharing their login details, and have up to 50 users per login.

thisjun
Posts: 2369
Joined: Mon Feb 24, 2014 11:03 am

Re: prevent multiple login for openvpn client

Post by thisjun » Thu Feb 23, 2017 7:36 am

SoftEther doesn't support Radius Accounting.

naabvpn
Posts: 2
Joined: Wed Dec 12, 2018 11:43 pm

Re: prevent multiple login for openvpn client

Post by naabvpn » Wed Dec 12, 2018 11:48 pm

Still have not found a way to troubleshoot multiple devices using a username on an ip?
OpenVPN users connect to Android infinitely :(

naabvpn
Posts: 2
Joined: Wed Dec 12, 2018 11:43 pm

Re: prevent multiple login for openvpn client

Post by naabvpn » Thu Dec 13, 2018 3:12 pm

I use Frei Radius.
And can easily identify duplicate users. Even with the ip subscriber.
Using the number of active sessions a username
OK ! Why does not this work on softether

Post Reply