Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Apologies if this is a FAQ but I did not find it in the answers, hence, I'm positing it here. I have a following scenario and I am curious how can I use OpenVPN-(AS) to solve my issue.

  1. I have two Application servers in two different LANs, separated by WAN, that need to communicate with each other over around 2500 different ports.
  2. Both of them have Static IP addressing and IP addresses cannot be changed on the fly.
  3. I only have SSL port open for me to communicate with over.

Questions:

  1. Can I build a SSL tunnel using OpenVPN to do what I need?
  2. will the following OpenVPN-AS scenario work?

Scenario:

  1. I setup a publicly visible VPN Server (vpnserver.somedomain.com)
  2. Make Application servers on both sides and connect to this publicly visible VPN server using the OpenVPN-Client.
  3. Connect from Application server 1 to Application Server 2 just like they can see each other.

Is this feasible with OpenVPN, and if so, are there any pointers on how to achieve this?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Yes you can do what's in your scenario. Read this and enable "client-to-client" in your config.

You only need to set up the config, generate the certs (easy-rsa, very simple), and start the processes. Just don't forget the "client-to-client" option in the config file.

The other possibility is to set up server on one of the servers, and client on another (if you have a free port visible from outside on one of them - if you only have tcp/443 it's not such a good idea, since tcp-over-tcp has alot of overhead, but will still work, if there is no better solution).

share|improve this answer
    
Hi @Mulaz, thanks for the response. I am not sure what part of the document you wanted me to read or the whole document itself. –  Atul Kulkarni Aug 28 '12 at 1:07
    
There are configuration examples for client and server setup, and an explanation for client-to-client setting there. Of course, other usefull stuff too. –  mulaz Aug 28 '12 at 1:12
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.