I'm in a kind of weird situation where I need to do the following:
Connect an OpenVPN tunnel with static RFC1918 IPs (think of 10.3.3.1 for the server end and 10.3.3.2 for the client end) and have it used by the KVM guest directly. What I'm trying to achieve is the KVM guest not knowing anything about the LAN and only the VPN tunnel.
EDIT: So that I don't need to mess with firewalls :-)
Normally I would try to bridge the tun-device with the interface for the KVM and assign the KVM a static IP (10.3.3.2). Is that wise or is there a better way?