|
|
On Wed, May 05, 2004 at 11:56:36AM +0200, Manuel Balderrábano wrote: > I'm confused: > > eth0 is the LAN ethernet card. > eth1 is the external ethernet card, with it's public address. > > br0 should have a fixed address that belongs to the internal LAN? > tap0 is the vpn interfaz, so it should have the address 10.3.0.3? Yeah, it's a bit confusing. There isn't much documentation on it, but there is a note in INSTALL-win32.html. <quote> Another important point to remember is that the addresses used in the "remote" option are real addresses, not virtual addresses. Before OpenVPN is started you must be able to ping the address given after the "remote" option. OpenVPN will try to connect to that address and if you can't ping it beforehand, OpenVPN will not be able to connect to it either. The rule of thumb to remember is that "remote" specifies real, non-VPN addresses while "ifconfig" specifies virtual VPN addresses. The address used in "remote" should NEVER be a part of the subnet defined by the "ifconfig" option. </quote> Basically the ifconfig br0 command sets the real address of the br0 interface, which replaces your internal interface. The ifconfig lines in the openvpn configs set up a "virtual" network used internally by openvpn. Patrick Lesslie ____________________________________________ Openvpn-users mailing list Openvpn-users@xxxxxxxxxxxxxxxxxxxxx https://lists.sourceforge.net/lists/listinfo/openvpn-users |