[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] OpenVPN tunnel - no explicit client or server?


  • Subject: Re: [Openvpn-users] OpenVPN tunnel - no explicit client or server?
  • From: James Yonan <jim@xxxxxxxxx>
  • Date: Thu, 5 May 2005 14:38:31 -0600 (MDT)

On Thu, 5 May 2005, Gerhard Wiesinger wrote:

> 
> 
> On Thu, 5 May 2005, James Yonan wrote:
> 
> > On Wed, 4 May 2005, Gerhard Wiesinger wrote:
> >
> >> Hello!
> >>
> >> I've OpenVPN 2.0.0 running in client/server mode (roadwarrior scenario)
> >> which works perfect.
> >>
> >> For the second fixed OpenVPN tunnel scenario I've the following question:
> >> Is it possible that side A and side B can establish the tunnel? So there
> >> is no explicit server or client, A can establish the connection to B, and
> >> B to A.
> >
> > Yes, if you run OpenVPN in point-to-point mode, and have each
> > configuration file reference the remote peer with a "remote"
> > directive, you will have a completely symmetrical, peer-to-peer style
> > setup where each side both initiates the connection as well as listens for
> > an incoming connection from the opposite peer.
> >
> 
> So as far as I saw there are 4 modes:
> *) client
> *) server
> *) TLS mode
> *) point-to-point mode
> 
> Is the point-to-point mode the TLS mode? If no, what's the difference?

Rather than saying there are 4 modes, I would say there's a number of 
different binary mode spaces:

(1) point-to-point or client/server
(2) TLS or static-keyed
(3) UDP or TCP
(4) TUN or TAP

While these modes are generally independent on one another, the one
unsupported combination is that client/server cannot be static-keyed.

James

____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users