Re: [Openvpn-users] Bridge mode help

[Dimitri Yioulos <dyioulos@xxxxxxxxxxxxx>]

On Thursday August 31 2006 11:43 am, Dimitri Yioulos wrote:
> Hello to all.
>
> You've been most patient with me in the past, and I hope that
> continues :-)   .
>
> As I've mentioned in the past, I've been using OVPN (running on
> CentOS 3.7) successfully in router mode for some time now.  But,
> I've reached a point where some of my users need to run an
> application or two via the vpn.  So, it seems to me that I now need
> to run OVPN in bridge mode.
>
> I've read the How-to's, etc., but due to my own density, I'm not
> quite getting it.  Here's my setup:
>
>
> 		LAN
> 	(192.168.100.0/22)
>
>
>
>       (192.168.100.1)
> 	FW/Gateway (192.168.1.1)--------OVPN
>     (67.108.xxx.xxx)	          (192.168.1.5 snat 67.108.xxx.xxx)
>
>
>
> 	   Internet
>
> The OVPN server sits in a DMZ.  As I hope I've illustrated, the DMZ
> interface of the OVPN server is 192.168.1.5, which is SNATed (eeks,
> is that a word?) by the firewall.
>
> Given the above, should this be the line in my server.conf?:
>
> server-bridge 192.168.103.2 255.255.252.0 192.168.103.3
> 192.168.103.20
>
> Does that assign 192.168.103.2 to the server and "reserve"
> addresses 192.168.103.3 through 192.168.103.20 for my clients?
>
> Would I still use the push route, push "dhcp-option DNS", and
> push "dhcp-option WINS" directives?
>
> Is this correct for the bridge-start script?:
>
> # Define Bridge Interface
> br="br0"
>
> # Define list of TAP interfaces to be bridged,
> # for example tap="tap0 tap1 tap2".
> tap="tap0"
>
> # Define physical ethernet interface to be bridged
> # with TAP interface(s) above.
> eth="eth0"
> eth_ip="192.168.103.2"
> eth_netmask="255.255.252.0"
> eth_broadcast="192.168.103.255"
>
> And, will I still be able to access my samba shares?
>
> Thanks very much.
>
> Dimitri


Anyone?

-- 
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

______________________
OpenVPN mailing lists
https://lists.sourceforge.net/lists/listinfo/openvpn-users