[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] OpenVPN server on a single-NIC machine?


  • Subject: Re: [Openvpn-users] OpenVPN server on a single-NIC machine?
  • From: "Dick St.Peters" <stpeters@xxxxxxxxxxxxx>
  • Date: Fri, 1 Aug 2003 09:16:43 -0400

James Yonan writes:
> Since you want the incoming tunnel to appear to be on the private subnet, you
> need to bridge.

James,

This is correct only if you want broadcast to work.  Otherwise simply
using normal routing will do just fine and is the way to go.

If you don't absolutely need broadcast, you want it not to work!  A
broadcast level that's 1% background noise on a 100 Mbps LAN is 1 MBps
and will completely swamp a 1 Mbps tunnel.

Bridging on WAN links has always been rare, for good reason.  You want
a router between a WAN link (or tunnel) and a LAN to limit the traffic
that gets on the WAN link.

As I write this I have 7 users tunneled into our tunnel server, and 6
of those 7 are joined to the server's subnet.  None of these tunnels
are bridged.

--
Dick St.Peters, stpeters@xxxxxxxxxxxxx