[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Bridging


  • Subject: Re: [Openvpn-users] Bridging
  • From: pieter claassen <pieter@xxxxxxxxxxxxxxxx>
  • Date: 08 Aug 2003 07:51:58 +0100

Hi Paul,

Keep in mind that once your VPN server and client know of each other,
none of the other computers know of you client and it is a routing issue
to tell them about it.

You have a few options there:
1. You can get your VPN server to proxy-arp for the remote machine and
pick any traffic destined to it up on it's behalf before it forwards it
remotely via the locally known routing table. For this to work, you need
the remote machine to have an IP in your regular network range (which
you seem to have). How to enable proxy arp on windows I am not sure, you
will have to look around.
2. The second solution is to route there. This can be done by giving
your remote machine a completely different IP on a different subnet and
telling your network default gateway, via a static route, that the VPN
server is the gateway to that route. Then when any machine on your local
net tries to contact the remote machine, the first port of call is the
default gateway who then redirects the next hop to the VPN server. This
I know works, but it means you have to mess with static routes on the
gateway. It also means that your tunnel is setup between two different
subnets (ie. 192.168.0.50 and 192.168.1.50)

Hope this helps,
Pieter
On Fri, 2003-08-08 at 00:13, Paul Sykes wrote:
> Hi,
> 
>  
> 
> I have successfully set up a VPN between two WinXP computers across
> the internet using standard key encryption.  However, the remote
> computer establishes the VPN connection fine and can ping/view shared
> folders of all the PCs in the LAN behind the VPN server.  However, the
> computers on the LAN are not able to ping/access the remote computer.
> 
>  
> 
> My network set up is as follows:
> 
>             LAN PCs are on 192.168.1.x
> 
>             Router is 192.168.1.1
> 
>             VPN server is 192.168.1.100
> 
>             Remote node is 192.168.1.150
> 
>  
> 
> The router forwards all information on my specified port to the VNP
> server and as I say the VPN seems to be working fine.
> 
>  
> 
> I have then set up a bridge between the LAN nic and the TAP device on
> windows, very easy to do in WinXP, you just select both adapters and
> tell it to bridge them.  I donʼt understand why this only appears to
> be working in one direction, but I suspect it has something to do with
> routing but I donʼt know enough about it to fix it.
> 
>  
> 
> If any one can help me I would be most grateful, plus if there is any
> further information you need, ie route tables I will provide them.
> 
>  
> 
> Thanks
> 
>  
> 
> Paul
> 
-- 
pieter claassen <pieter@xxxxxxxxxxxxxxxx>


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users