title: AWS Client VPN Client-Client Communication
body: <p>I have an AWS Client VPN set up using certificate auth. I'm setting this up for a client-client access system, essentially as is described in <a href="https://docs.aws.amazon.com/vpn/latest/clientvpn-admin/scenario-client-to-client.html" rel="nofollow noreferrer">this AWS scenario/example</a>. It's all working, and I can ping from one client to another if I know their IP address.</p>
  <p>My question is: in actual use, what use is this system if clients get assigned a random IP address every time they connect to the VPN, and there's no way to tell which clients are connected or what their IP addresses are without checking the AWS console or using the <a href="https://docs.aws.amazon.com/cli/latest/reference/ec2/describe-client-vpn-connections.html" rel="nofollow noreferrer">describe-client-vpn-connections</a> CLI (which requires IAM credentials)?</p>
  <p>Is there any way to:</p>
  <ul>
  <li>Assign static IP addresses to specific clients, so they receive the same one every time they connect to the VPN?</li>
  <li>Get a list of connected clients (with their CommonName and IP address)?</li>
  <li>Use a connected client's host name / computer name instead of their random VPN IP address?</li>
  <li>Any other way to connect from one client to another without having to use the AWS Console or describe-client-vpn-connections CLI to get a list of connected clients?</li>
  </ul>