Dag Richards <[email protected]> wrote:

> I run OpenVPN on a pair of carped up gateways ....

With bridge between OpenVPN interface and other interfaces?

> What are you trying to achieve with this very odd sounding config.
> There may be a more straightforward way to get there.

Ok, so I'll tell exactly what I want to do.

I have a private network of machines in various locations. These machines 
are running different systems (Linux, Win7) and need to be connected with 
a VPN. Some of them can connect only to certain TCP port (because they are 
behind a fascist firewall) and some of them have less restricted network 
access and are able to communicate using UDP. To make it more complicated, 
one of these machines can connect directly to the OpenBSD box with a 
dedicated fast Ethernet interface, so I'd like to use that interface.

OpenBSD box acts as a server for all these machines.

So we have three interfaces:

tun0 - for VPN clients connecting with TCP
tun1 - for VPN clients communicating with UDP
em0 - direct, fast interface for one client

There is also em1 interface for outbound traffic (with public IP).

Now all machines connect to the VPN using TCP, but I want to switch these 
UDP-capable to UDP and this one Ethernet-capable box to Ethernet (now this 
Ethernet connection is completely separate, with separate addressing). What 
I need to do is to have these three interfaces bridged together with one 
common IP address, so all computers in a VPN will be visible to each other.

Take care.

-- 
"qui hic minxerit aut cacaverit, habeat deos superos et inferos iratos"
http://www.chmurka.net/

Reply via email to