Re: [Openvpn-users] netmask

["ksp - knetdome" <ksp@xxxxxxxxxxxx>]

sorry i haven't gotten back to you sooner on the other
discussion about this -- i was and still am attending an
out-of-town class.

> ksp - knetdome explained that with VPN
> clients, there
> is only one netmask that is used - 255.255.255.255 because the
> link is
> point to point.
er, not exactly. :-) what i said was...
"if you wan't the openvpn interfaces themselves to use normal
netmasking then you'll need to specify tap devices instead of
tun,"

if using normal netmasks on your openvpn interfaces serves your
purpose then just change the configuration file to use "dev
tap" instead of "dev tun"... it's really just about that simple
and that alone may make things work the way you expect.

otherwise, if you stick with using tun devices, you'll need to
setup the appropriate routes in each side of the configuration
file and open your firewall to allow those routes in whatever
ways you deem appropriate for them.


____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users