[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

[Fwd: Re: [Openvpn-users] Without subnet]


  • Subject: [Fwd: Re: [Openvpn-users] Without subnet]
  • From: "K. C. Bowe" <bowe@xxxxxxxxxx>
  • Date: 02 Mar 2004 10:22:51 -0500

I apologize if these are basic questions but I'm still having trouble
putting the pieces together. My first thought was to use a virtual
interface but..

brctl addif br0 eth0:0

..added eth0 not eth0:0 and killed the network connection. Do I need to
add a second network card or can I use eth0?


To route a public block over a private one is this what I have to do?

10.0.0.2<>1.2.3.4<->4.3.2.1<>10.0.0.1  <>  4.3.2.2<->4.3.2.3
   tap-win32 <-----> eth0 <> br0 <> tap0 <> eth0:0 <-> SMTP 


Or, route a public block directly like this?

XP side:
--route 4.3.0.0 255.255.0.0

if --float is used on the Linux side how do I identify that address for routing? 

I am still unclear on the concepts and unsure on which method is most
appropriate for this situation. Any help at all would be greatly
appreciated. Thanks

Colin



It's possible to --ifconfig a private address block, but then to route a
public block over it.  It is also possible to --ifconfig a public address pair
directly, but you must make sure at either end that there's no routing
conflict.  I've personally done the former, and I've seen others do the later.

James


> 
> >From the documentation...
> 
> "openvpn --remote june.kg --dev tun1 --ifconfig 10.4.0.1 10.4.0.2 --verb 9
> 
> make sure that they are private addresses (such as those that begin with 10 or
> 192.168) and that they are not part of any existing subnet on the networks of
> either peer."
> 
> Is there any way around this? I'm working with a class B block that is directly
> on the internet and I'm looking for a way to securely send to a SMTP server and
> access a file server (Samba on Linux) from a few remote XP laptops. The servers
> only allow connections from inside that block. The dept. doesn't have the money
> for a M$ server and neccesary new hardware so I've been looking for an open
> source solution. I spent a lot of time with Freeswan but I could not connect
> when I went offsite. Does anyone know if OpenVPN will work in this situation? Or
> does anyone know of any other projects I could look into. Thanks 
> 




-------------------------------------------------------
SF.Net is sponsored by: Speed Start Your Linux Apps Now.
Build and deploy apps & Web services for Linux with
a free DVD software kit from IBM. Click Now!
http://ads.osdn.com/?ad_id=1356&alloc_id=3438&op=click
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users