Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Apr 2011 08:50:56 +0200
From:      Maciej Milewski <milu@dat.pl>
To:        Ryan Coleman <editor@d3photography.com>
Cc:        freebsd-questions@freebsd.org
Subject:   Re: OpenVPN routing
Message-ID:  <201104270850.56927.milu@dat.pl>
In-Reply-To: <612D04A1-EEAB-4443-A336-36A53CB7DA22@d3photography.com>
References:  <6073BC9F-553D-41E2-AE42-341B61850EA7@cwis.biz> <403698FF-F38D-4250-A1E5-FF2D6DE8DAFE@cwis.biz> <612D04A1-EEAB-4443-A336-36A53CB7DA22@d3photography.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wednesday 27 of April 2011 01:15:09, Ryan Coleman wrote:
> Maciej,
> Here you go:
> Ryan-Colemans-MacBook-Pro:~ ryanjcole$ netstat -rn
> Routing tables
> Internet:
> Destination        Gateway            Flags        Refs      Use   Netif
> Expire default            10.0.1.1           UGSc           61        0   
>  en1 10.0.1/24          link#5             UCS             3        0    
> en1 10.0.1.1           0:23:12:f7:37:cc   UHLWI          89     1268    
> en1   1142 10.0.1.2           0:14:d1:1f:79:1b   UHLWI           0     
> 837     en1    183 10.0.1.198         127.0.0.1          UHS             0
>        0     lo0 10.0.1.255         ff:ff:ff:ff:ff:ff  UHLWbI          0  
>      6     en1 127                127.0.0.1          UCS             0    
>    0     lo0 127.0.0.1          127.0.0.1          UH              2      
> 75     lo0 169.254            link#5             UCS             0       
> 0     en1 172.16.87/24       link#7             UC              1        0
>  vmnet1 172.16.87.255      ff:ff:ff:ff:ff:ff  UHLWbI          0        3 
> vmnet1 192.168.46         192.168.47.2       UGSc            0        0   
> tap0 192.168.47         link#10            UC              1        0   
> tap0 192.168.47.2       link#10            UHLWI           1        0   
> tap0

And this is with tap interfaces - I think it won't work.
Don't use bridge mode if you have two subnets of /24. I saw examples that it 
would work only if you make one subnet accessible to both: local network and 
vpn network. Change your configuration from bridged to routed or change your 
vpn addressing space.
If you'll go the routed way you may try this:
http://www.secure-computing.net/wiki/index.php/FreeBSD_OpenVPN_Server/Routed

-- 
Maciej Milewski



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?201104270850.56927.milu>