alexev
First, my apologies for my bad English, is not my natal tongue 🙁
I have a functional OPenVPN installation, with a dedicated server for it, when i establish my connection form different clients works perfectly.
My idea is configuring a normal PC with 2 network interfaces to act a as a bridge that routes any traffic to the pushed routes to my VPNServer
Sounds strange, i will try to "draw" the architecture
(VPN-SERVER)-------------(INTERNET)----------------------(ISP-HOME)----(DHCP)-------(VPN-Client-Bridge)--------(SWITCH)------(PC-Windows)
To the switch, there will be several PCs (windows based 🙁 ) that will connect trough the bridge and get the dhcp and then navigate for the web, BUT when they try to go to one of the VPN pushed routes they will go for BR0 and tun0 to my VPN-SERVER
So far, i get the bridge configured as the "draw" shows, everything works as intended (the clients behind the switch gets dhcp and navigate) but they cannot route trough the VPN
I have searched the web for a couple of hours and doesn't seem to be any documentation about it, all i found was sever Ethernet bridges configuration (tap), that's the reason i am wondering if what i want is even possible.
Thanks in advance for the help you can spare me
brendan
from what it sounds like, you don't need tun or tap/bridge specifically to accomplish what your goal is. it seems either might be able to do it. more, i think routing is what you need to manage this. does this diagram indicate what you want your PCs to connect to? are you looking to have the PCs talk to another device or devices that connect in via the VPN tunnel?
(VPN-Connected endpoint)-------------------------------------------------------------------------------\
(VPN-SERVER)-------------(INTERNET)----------------------(ISP-HOME)----(DHCP)-------(VPN-Client-Bridge)--------(SWITCH)------(PC-Windows)
a little more detail on what you are trying to do will help.
alexev
Thanks for your answer;
Yes, the "office" in the client side will connect to several servers behind the VPN Server, the idea is that the offices will receive the "client" machine configured as bridge, then they will conect it betwen the dhcp provided by their ISP and the lan (i mean (dhcp-isp)----eth1------VPNCLIENT BRIDGE eth0------LAN---- several clients
What i want to do is, when a client in the lan navigate google.com the bridge will pass it to the ISO gateway, BUT when the client want to navigate to certain intranet pages then the bridge must send it to te tunnel
I am thinking that maybe IPtables cab be a solution and i am currently working on that
Thanks again for your time
