Remote vpn ethernet bridging

angis

Hi, situation is like this:

I have a computer with special software, customer abroad has a Laptop and connect multimedia center via etherner port to this laptop, I want to connect directly to customers ethernet port so I can program that multimedia center using a software in my PC. I know the ip address of multimedia center, but I cannot ping to it then I use hamachi port bridging.

Any information would be very helpfull

Thanks

janjust

this can be done using openvpn but there are several ways to achieve this. Is it a point-to-point connection (1 client, 1 server) or will you require multiple clients in the future? this has a big impact on the setup.

The fact that you're (also) using hamachi only complicates things, is this truly necessary?

angis

Hi,

I will require multiple clients, no need for hamachi. Just tell me what is the best way 🙂

Thank you very much

janjust

Start reading the OpenVPN HOWTO (http://openvpn.net/index.php/open-source/documentation/howto.html#pki) , starting with the PKI setup (certificates).

Create a client/server setup using 'dev tap' instead of 'dev tun' . You won't need a bridging setup on the server side - if you need bridging on the client side (might be required if your special software needs broadcast forwarding) then the client-side setup will be trickier (but not impossible) - is this something you can push down your clients' throats?

HTH,

JJK

angis

I think I will need to bridge clients ethernet port so I can connect directly to the multimedia center directly with my software. I saw one guy doing this by installing openVPN software and certificates.

Thank you again

janjust

yes you will need certificates and keys (pki).
After that, set up openvpn client+server using the default files found on the openvpn website
http://openvpn.net/index.php/open-source/documentation/howto.html#client
http://openvpn.net/index.php/open-source/documentation/howto.html#server

Use 'dev tap' instead of 'dev tun' , do NOT use ethernet bridging on the server.

On the client-side: use 'dev tap' as well and bridge the tap (tap-win32) adapter together with the client-side LAN adapter (Local Area Network connection on Windows). On Windows this is done in the Network control panel, on Linux you'd use brctl command; I have no clue what you'd use on MacOS.

This will have an impact on the client's computer settings, so you'd best experiment with this yourself before attempting to hand it to an end-user.

angis

Is there anybody who could create me a server for a fee?

janjust

sure, some of the more experienced posters on this forum have done that; I've done it myself a few times as well. I'll forward your question to somebody who might be more eager than me to do this - I'd be willing to do it, but am quite busy already , so you'd be better off with someone who has more time available.

angis

Very well, I will be waiting, meanwhile I should buy openVPN license?

janjust

there are two versions of openvpn: a commercial version and a free version; with the commercial version (openvpn access server) you also get support, with the free version (which I always use) you have to rely on volunteers like us on this forum.

angis

I was trying to get free version, but couldn't find it, I have found a message that there are no longer free license keys.

janjust

Look here:
http://openvpn.net/index.php/download/community-downloads.html

it's the community version (latest = 2.3.1) which can act as both client and server.

angis

oh, now I understand, I thought that it is client only. OpenVPN website is little bit difficult to understand for users like me 🙂)))

Thank You again

angis

I think I have made it, thank you for all your help 🙂))

angis

Is there a way to use OpenVPN client in China so it can connect to server in Europe?

janjust

yes but the GreatFirewallOfChina is becoming better and better at filtering out OpenVPN traffic; you could try for an stunnel+openvpn setup instead.