|
|
Scenario. The client has something like the following config: client dev tap dev-node VPNTap proto udp remote vpn.example.com 1194 ca keys/ca.crt cert keys/client.crt key keys/client.key and the VPNTap is defined to have the following IP/netmask: 64.8.0.1/28, so resides on a subnet with a block of 16 addresses. Bridging isn't enabled (should it be)? On the server side: local 192.99.99.2 port 1194 proto udp dev tap0 ca keys/ca.crt cert keys/server.crt key keys/server.key dh keys/dh1024.pem server-bridge 192.99.99.3 255.255.255.0 192.99.99.64 192.99.99.79 push "route 192.99.99.0 255.255.255.0" I understand how a single client can tunnel into the intranet, but I'm curious as to others on the intranet (192.99.99/24 above) can "see" computers in the /28 client net. Is bridging on the client side required to make that happen? Does the /28 on the client side simply control the maximum number of client computers that connect from the client side to server, and thus is generally unrelated to the number of computer (more accurately network interfaces) on the client side? ______________________ OpenVPN mailing lists https://lists.sourceforge.net/lists/listinfo/openvpn-users Warning: require_once(../../../archive_common.php) [function.require-once]: failed to open stream: No such file or directory in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2006-08/msg00081.html on line 210 Fatal error: require_once() [function.require]: Failed opening required '../../../archive_common.php' (include_path='/usr/local/lib/php') in /home/openvpn/domains/openvpn.net/public_html/archive/openvpn-users/2006-08/msg00081.html on line 210 |