[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] How to establish a tunnel between two machine while both of them are behind NAT?


  • Subject: Re: [Openvpn-users] How to establish a tunnel between two machine while both of them are behind NAT?
  • From: Matt Richards <matt@xxxxxxxxxxxxx>
  • Date: Sun, 11 Feb 2007 04:32:50 +0000
  • Openpgp: id=20E6CE5B; url=pgp.mit.edu

hello,

stun allows data to get back into a network that is behind a NAT device
by connecting out to a server first, the only trouble is the server that
the stun client connects to cant be nat'ed, from what I understand anyway.

that hamachi is probably slow because all the data is proxying through a
3rd party network that is also being used by lots of other people that
are using hanachi.

I really cant see any way to directly connect to computers that are both
behind NAT devices that masquerade to each other and don't have any
forwarded ports / IP addresses without support from a 3rd device that
does have a way to accept connections from the internet.

I would try to find somebody that can spare you some bandwidth and run a
openvpn hub, you can use a little router running openwrt or look into
hiring a server, it depends on how much you want this tunnel.

Matty.

darkblue wrote:
> ok, I will check it.
> and the, I have tried the hamachi, it really works, I could connect my
> desktop on my office from my home pc. it is great, but just one
> problem, It is too slow.
>
> 2007/2/8, David Balazic <David.Balazic@xxxxxxxxxxxxxxxxxx>:
>>
>>
>>
>> No it isn't (a protocol of VOiP).
>> It is exactly what you are looking for : "S_imple T_raversal of U_DP
>> through
>> N_ATs"
>>
>> David
>>
>>  ________________________________
>>  From: darkblue [mailto:darkblue2000@xxxxxxxxx]
>> Sent: Thu 08-Feb-07 02:04
>> To: Matt Richards; Openvpn-users@xxxxxxxxxxxxxxxxxxxxx;
>> David Balazic
>> Subject: Re: [Openvpn-users] How to establish a tunnel between two
>> machine
>> while both of them are behind NAT?
>>
>>
>>
>>
>> wow, thanks for matt and david's reply.
>> hmm, stun seem to be a protocol of voip, I am going to try hamachi.
>>
>> 2007/2/8, Matt Richards <matt@xxxxxxxxxxxxx>:
>> > hum, ok well the only way i can see is to get a 3rd party that runs a
>> > server that has the ability to forward a single port to a server.
>> >
>> > I did look into this a little while ago, I tried to get 32 megs of ram
>> > and a 200 MHz CPU on a virtual server but I never pushed it.
>> >
>> > Maybe somebody you know or maybe you could hire a miniserver that has
>> > a public IP address to just run a couple of openvpn servers on that
>> > will allow you to route between or bridge the virtual connections.
>> >
>> > Appart from that I cant see anyway of running an openvpn connection
>> > between two instances that you dont have control over.
>> >
>> > hth,
>> >
>> > matty.
>> >
>> > Quoting darkblue <darkblue2000@xxxxxxxxx>:
>> >
>> > > actually, I have no privilege to access both of the two nat
>> gateways.
>> > > So, I am afraid I can not do such port forward modification in the
>> > > home's nat gateway.
>> > >
>> > > and, is there any possible?I know it is tough, but I really want to
>> > > figure out.
>> > > because there are so much work to do even after I am out of my
>> office.
>> > >
>> > > 2007/2/6, Matt Richards <matt@xxxxxxxxxxxxx>:
>> > >> darkblue wrote:
>> > >>> Any possible to do that.
>> > >>> because My Desktop in corp. and My PC at home are all behind NAT.
>> > >>>
>> > >>>
>> > >>>
>> > >> hello,
>> > >>
>> > >> yes its possible, you would just have to forward the port that you
>> > >> intend to use for the server to the computer that is running the
>> daemon
>> > >> behind the NAT device
>> > >>
>> > >> the default port is 1194/udp (i think) so just get your NAT
>> devices at
>> > >> home to forward this port and connect from the pc at your work
>> place.
>> > >>
>> > >> Matty.
>> > >>
>> > >
>> > >
>> > > --
>> > > He is nothing
>> >
>> >
>> >
>> >
>> >
>>
>>
>> -- 
>> He is nothing
>>
>
>


Attachment: signature.asc
Description: OpenPGP digital signature

-------------------------------------------------------------------------
Get stuff done quickly with pre-integrated technology to make your job easier.
_______________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users