Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I was wondering, if I am setting up an Linux OpenVPN server using ethernet bridging rather than a routed tunnel. Do I still need to push a route to the client that is connecting to me?

I am setting OpenVPN to use DHCP proxy instead of giving it a pre defined pool.

What do I need to still configure, other than the SSL params?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

First, here are my OpenVPN configuration notes as a general starting point.

And here are the OpenVPN docs about bridging.

The short answer is that if you set up a bridged openvpn config and you use a split tunnel, the clients will be directly connected only to the server's network via the vpn. If you want the clients to be able to connect to other networks beyond that on the server side, you need to push one or more routes to them via the vpn.

If you don't use a split tunnel (all traffic goes through the vpn, via the redirect-gateway setting), then you can use the dhcp server config to push a default gateway to the hosts, and they can use that (over the vpn) to get to other networks, or out to the internet. You also need to use an iptables nat config as detailed in the docs.

share|improve this answer
    
Oh I see, if all traffic is going over the tunnel then no need for routes. But if I am using a split I have to route the traffic. Makes sense if I got it right. –  Solignis Apr 20 '11 at 2:37
    
Yup you got it. –  Phil Hollenback Apr 20 '11 at 4:15

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.