openwisp / openwisp/openwisp-controller
[bug] Prevent changing subnet and IP objects assigned to a VPN Server
@stktyagi is already working on this.
Since Jul 1, 2026.
- Dominant language
- Python
- Stars
- 773
- Forks
- 315
- Avg merge
- 2d 16h
- Merged PRs (30d)
- 14
Description
Description
There is a need to prevent changes to the subnet and IPAdress objects when they are assigned to a VPN server. Modifying the subnet of the VPN when there are existing VPN clients creates collisions in provisioned IPs, leading to potential network issues.
Steps To Reproduce
Steps to reproduce the behavior:
- Create a WireGuard VPN server and assign a subnet and IP to it.
- Create a template for this VPN and assign it to a device
- Edit the subnet object created in step 1 and change the subnet field
- Assign the VPN template to another device
Expected behavior
Prevent changing subnet and IP address objects if there are existing VpnClients
Actual Behavior
Both devices get IP address from different subnets
The second peer has an IP address from
System Information:
- OS: Ubuntu 24.04 LTS
- Python Version: Python 3.11.2
- Django Version: Django 5.2.x
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Assessment
This issue has not been assessed yet.