Re: [Openvpn-users] routing between tunnels

[Lehmann Guillaume <lehmann@xxxxxxx>]

Johannes Bauer wrote:
> Hello,
Hello,

> I've got the following Openvpn setup:
>
>
>
>     Client1
>     192.168.200.2
>        |
>        |
>        |
>        |
> tun1 - 192.168.200.1
>        |
>     Server -tun2 - 192.168.200.3 -------- 192.168.200.4 Client2
>        |
> tun3 - 192.168.200.5
>        |
>        |
>        |
>        |
>     192.168.200.6
>     Client3
>
> where each of the clients has its own tunnel to the server devices 
> tun1-tun3. All tunnels work, clients can ping the server. But now I want 
>  the server to route packets between the clients. Which route or 
> iptables settings do i have to use?

The problem here is the server is sharing the same IP network. So 
you can't have routing between them. So you must stayed with 
switching (level 2 in the OSI model). If you prefer routing, you 
must change the IP addresses design.

To add filtering with iptables, you can use options about IP 
adresses (options -s and -d), or better, with options about 
interfaces (options -i and -o, and values are tun1, tun2 or 
tun3). If all rules are the sames for all tun devices, you can 
use the value "tun+".
For details, see the HOWTO on the OpenVPN website.
If you are using a bridge, you can use iptables or ebtables.


> Thanks a lot for your answers,
> Johannes
Bye

Guillaume



-------------------------------------------------------
The SF.Net email is sponsored by EclipseCon 2004
Premiere Conference on Open Tools Development and Integration
See the breadth of Eclipse activity. February 3-5 in Anaheim, CA.
http://www.eclipsecon.org/osdn
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users