garett
Hello everyone! Need some help with OpenVPN and network bridge. Situation is: I have VPN-server (Debian 6):
port 1495
proto udp
dev tap0
script-security 3
ca /etc/openvpn/keyst/ca.crt
cert /etc/openvpn/keyst/server.crt
key /etc/openvpn/keyst/server.key
dh /etc/openvpn/keyst/dh512.pem
server 10.10.10.0 255.255.255.0
client-config-dir /etc/openvpn/ccd2
keepalive 5 30
client-to-client
status /etc/openvpn/openvpn-statusT.log
verb 3
log /etc/openvpn/serv2/server_nameT.log
script-security 3
mtu-test
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
and VPN-client (also Debian 6):
client
dev tap0
proto udp
remote *.*.*.* 1495
nobind
persist-key
persist-tun
script-security 3
ca /etc/openvpn/keys/ca.crt
cert /etc/openvpn/keys/client3.crt
key /etc/openvpn/keys/client3.key
log /etc/openvpn/client_3.log
verb 5
Also VPN-client have a 2 physical interfaces - one of them is a real IP (Internet) and another - LAN interface. So there are 3 interfaces on my VPN-client (except l0):
eth0: real IP
eth1: 192.168.0.5 mask 255.255.255.0
tap0: 10.10.10.4 mask 255.255.255.0
And I need to connect tap0 with eth1 via bridge:
apt-get install bridge-utils
nano /etc/network/interfaces
# The primary network interface
allow-hotplug eth0
iface eth0 inet static
address *.*.*.*
netmask 255.255.255.0
gateway *.*.*.*
#allow-hotplug eth1
#iface eth1 inet static
# address 192.168.0.5
# netmask 255.255.255.0
auto br0
iface br0 inet static
bridge_ports eth1
bridge_fd 0
address 10.10.10.4
netmask 255.255.255.0
network 10.10.10.0
broadcast 10.10.10.255
So my goal is: VPN-server -----> tunnel -----> VPN-client -----> Windows computer. I want to connect from VPN-server or from another VPN-client (from network 10.10.10.0/24) to Windows computer directly. This should looks like:
mstsc->10.10.10.4 (from any VPN-client). Should I give same IP (10.10.10.4) to Windows computer and how should I connect it to my VPN-client? I mean: one cable (eth0) - to Internet, and one cable (eth1) - to Windows machine (using cross-over cable). Am I right? Thank you for answers 😉
