kingofkya I am curious how you guys would attack this problem. We have a Vlaned switch with client lans that unfortnately can be any subnet 192.X 172.X etc... And some vlans can be the same subnet so we can have 10 diffrent 192.168.0.1/24. Any ideas on the best way to do this.? For example lets say I have only 2 networks/vlans. eth1.10 | 192.168.0.0/24 eth1.20 | 192.168.0.0/24 And eth0 would be a public ip. 1.1.1.1 And we of course would have 2 clients. ClientA --> vpn to vlan10 ClientB --> vpn to vlan20 So my under standing of open vpn is that you can restrict a users access by ip/subnet, however I don't see anyway to bond to a interface, on a per user bases. I was thinking about useing some type of virtulization / jail, and run a instance of open vpn per user. But I hope there is a more elegent solution as updating might be a pain later on.
kingofkya That looks promising. "Brouting: decide which traffic to bridge between two interfaces and which traffic to route between the same two interfaces. The two interfaces belong to a logical bridge device but have their own IP address and can belong to a different subnet."
duster197 All machines are indeed cloned, but, installation of the vpn client is only run by script after the cloning has taken place. I'm not sure what data is used to gen the mac, but would it be possible that clients gen identical mac's as they are cloned by mulitcast. Meaning 20 machines at the same time would run the installer? How can i make the client software generate a new mac?
maikcat if you are using tap interface.. lladdr address Specify the link layer address, more commonly known as the MAC address. Only applied to TAP devices. Michael.
