[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Broadband sharing question


  • Subject: Re: [Openvpn-users] Broadband sharing question
  • From: "Stephen Liu" <satimis@xxxxxxxxxxxx>
  • Date: Thu, 04 Sep 2003 00:18:52 +0800
  • Importance: normal
  • Priority: normal

Hi Dave,

Lot of thanks for your detail advice.

As suggested Shorewall will suit my application.  The three boxes are
located in the same house and can be connected via a crossover cable. 
RH9.0 will be the server providing Internet access to other 2 boxes. 
Protection with firewall is necessary.

On Wed, 2003-09-03 at 13:37, Dave Lau wrote:
> - snip -  
> Well, I guess to be even more
> general, you don't even need shorewall.  All you REALLY need in order
to
> accomplish internet connection sharing with the above setup is to do
the
> following on the RH9.0 box:
> 
> echo 1 > /proc/sys/net/ipv4/ip_forward
> iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
> 
> Then, assuming eth1 on RH9.0 is at IP address 192.168.1.1, configure
the
> tcp/ip settings on W2K and RH8.0 to use 192.168.1.1 as their default
> gateway. 

I am interested to test this simple setup linking 2 RH boxes via a
**CROSSOVER** cable.

RH9.0 box (eth0 connected to xDSL-broadband)
-Setup eth1 as ethernet connection
-Configure Network Settings
-Check "Statically set IP address"
  Address: 192.168.1.1
  Subnet Mask: 255.255.255.255
  Default Gateway Address (blank)

RH8.0 box
-Setup eth0 as ethernet connection
-Configure Network Settings
-Check "Statically set IP address
  Address: (blank)
  Subnet Mask: (blank)
  Default Gateway Address 192.168.1.1

If I am wrong please correct me.

> OpenVPN is a powerful tool for creating secure tunnels across an
untrusted
> network, such as the internet.  Say the RH9.0 box is at your house,
the W2K
> box is at your friend Bob's house, and the RH8.0 box is at Fred's
house.
> You could use OpenVPN to connect these three computers via secure
tunnels
> through the internet, enabling you to securely share files or play
online
> games as if you were members of the physical same network.  The
"untrusted
> network" doesn't have to be the internet, either - it could be the
wireless
> network at you home or office.  In this case, openVPN can be used to
encrypt
> traffic as a more secure alternative to WEP.  If you are really
security
> conscious and wish to use openVPN in your wired setup, it is certainly
> feasible, and the fine documentation provided on the openVPN homepage
should
> provide you with ample examples as to how to set up such a network.
> Examples for bridged and routed configurations on both linux and
windows
> platforms are available.

Interesting.  I will go through the document mentioned later.  Will
OpenVPN be installed on all boxes in the network sharing data, i.e. no
server nor client?

Thanks

B.Regards
Stephen






> 
> Good luck,
> Dave
> 
> 
To Get Your Own iCareHK.com Email Address?  Go To www.iCareHK.com.
----- Original Message ----- 
> From: "Stephen Liu" <satimis@xxxxxxxxxxxx>
> To: <openvpn-users@xxxxxxxxxxxxxxxxxxxxx>
> Sent: Tuesday, September 02, 2003 11:10 PM
> Subject: [Openvpn-users] Broadband sharing question.
> 
> 
> > Hi all folks,
> >
> > Just join this list.
> >
> > I am prepared to install OpenVPN on a RH9.0 box to share broadband
with
> > other 2 PCs running Win2K and RH8.0 respective and expect to share
your
> > experience.  I have following questions;
> >
> > 1) Can OpenVPN help me in this respect? Or there is other better
> > alternatives?
> > 2) What shall be the hardware configuration on the RH9.0 box running
> > OpenVPN. An additional network card + a hub.
> >
> > Kindly advise.  Thanks in advance.
> >
> > B.Regards
> > Stephen Liu


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users