re [KLUG Members] OpenVPN & DHCP
Adam Tauno Williams
adam at morrison-ind.com
Tue Jun 21 09:16:03 EDT 2005
> > In a normally routed network yes. But client-VPNs vs. site-to-site VPNs are
> > usually setup in a bridged fashion so that the client operates as if it were
> > local. This is because most brain-dead client operating systems don't support
> > any kind of routing protocol (OSPF, etc...).
> I already had a WINS server on the remote (server) LAN along with a
> Samba Server. So, I figured TUNneling (routing) would be o.k. Am I
> amiss here?
You're not wrong. But you need to introduce the route(s) to the remote
networks into the routing table of the client; how you'd do this on
Windows seems a mystery to me (hence most client-VPNs run bridged or
proxy-arp'd).
If you have
CLIENT(a.b.c.d)----VPN----(a.b.c.e)HOST(f.g.h.i)<---LAN[f.g.h.[j...z])
The client (even Windows!) can intuit that a.b.c.[d...z] lies on that
VPN interface. But it doesn't know that f.g.h.[i...z] lies via gateway
a.b.c.e unless someone or something tells it so.
Does OpenVPN 2.x offer you an option to run a script (aka batch file)
when the connection comes up and goes down. If so you might be able to
invoke the windows route command with the proper values; but I don't
know if you can do this as a non-Administrator. (?)
More information about the Members
mailing list