Re: [Openvpn-users] openvpn 1.5b4 on win32

["James Yonan" <jim@xxxxxxxxx>]

Kristof Hardy <kristof.hardy@xxxxxxxxxxxxxxx> said:

> Hi,
> 
> I've been testing the windows port a few times now, and it works very 
> good.  From the road warrior I can ping my OpenVPN 1.5b4 Linux box to 
> wich I'm connected (and vice versa). So that's perfect.
> 
> But how can I reach my network behind this Linux gateway? (is it just a 
> routing problem at my side (I'll punch myself and go after it if that's 
> the case :)) or is there anything I've missed?)
> 
> Do I have to use the Ethernet bridging part (in the howto) to establish 
> the connection to my subnet?

Yes, ethernet bridging is one possibility.  There is also proxy ARP which I
have not used personally, but others on this list have (HOWTO anyone?)

You could also use IP routing to make this work:

The road warrior would need a route command that routes all IP addresses of
the remote subnet into the TAP-Win32 adapter (the route command is usually
implemented in an --up script)  Normally you don't also need a special route
on the linux end of the connection if the linux box is also a gateway for the
subnet.  Make sure to use a different subnet for the virtual tap LAN than you
do for the physical ethernet, and make sure the tap network/subnet matches on
both ends of the connection.

If you are bridging, you would do just the opposite, i.e. use the exact same
subnet on the tap LAN as on the physical ethernet.

Some people prefer bridging because it also passes broadcasts over the VPN,
which makes it easy to do samba/windows browsing and file sharing.

Others avoid bridging for the same reason -- passing broadcast traffic eats up
limited VPN bandwidth and doesn't scale well.  I personally use bridging when
I work from my laptop at WiFi cafes, and I find that the broadcast traffic is
not a problem when connecting to a small subnet.

James


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users