#. ``--learn-address``
- Executed in ``--mode server`` mode whenever an IPv4 address/route or MAC
+ Executed in ``--mode server`` mode whenever an IP address/route or MAC
address is added to OpenVPN's internal routing table.
#. ``--auth-user-pass-verify``
OpenVPN's internal routing table.
:code:`$2` - [address]
- The address being learned or unlearned. This can be an IPv4 address
- such as :code:`"198.162.10.14"`, an IPv4 subnet such as
- :code:`"198.162.10.0/24"`, or an ethernet MAC address (when
- ``--dev tap`` is being used) such as :code:`"00:FF:01:02:03:04"`.
+ The address being learned or unlearned. This can be:
+
+ * an IPv4 address such as :code:`"198.162.10.14"`,
+ * an IPv4 subnet such as :code:`"198.162.10.0/24"`,
+ * an IPv6 address such as :code:`"2001:db8:1:2:3:4:5:6"`,
+ * an IPv6 subnet such as :code:`"2001:db8:1:2:3:4:5::/112"`, or
+ * an ethernet MAC address (when ``--dev tap`` is being used)
+ such as :code:`"00:FF:01:02:03:04"`.
:code:`$3` - [common name]
The common name on the certificate associated with the client linked
high-level common name, rather than the low level client virtual
addresses.
+ A dual-stack client connecting to a dual-stack server will cause two calls
+ to the ``cmd`` script in quick succession, as the server learns each of the
+ IPv4 and IPv6 client addresses.
+
--route-up cmd
Run command ``cmd`` after routes are added, subject to ``--route-delay``.