Layer2 trunk

szistvan

Hi!

I'm using OpenVPN with great satisfaction (debian wheezy).
The current structure:

            eth0| Gateway 1|eth1.
Internet--------| OpenVPN  |-------br2
                           |-------br3
                           |-------etc.


bridge name     bridge id               STP enabled     interfaces
br2             8000.002618eb9a88       yes             eth1.2
                                                        tap2
br3             8000.002618eb9a88       yes             eth1.3
                                                        tap3
br4             8000.002618eb9a88       yes             eth1.4
                                                        tap4
br5             8000.002618eb9a88       yes             eth1.5
                                                        tap5
br8             8000.002618eb9a88       yes             eth1.8
                                                        tap8

There is another gateway. A similar structure (other VLAN allocation).
A network built between the two sites. This is an internal line.

The question: OpenVPN can be linked to whether the two sides with layer 2?
In other words, trunked traffic established between the two machines?

Sketch:

   Internet----|Gatewai 1|----:trunk:----|Gateway 2|-----Internet

Can be solved at all?
Is there anything else you need? (for example. eth2 interface)

Thanks for your help and advice.

szistvan

I do not want to use new machines (PC2, PC3).
The plan:

       eth0| Gateway 1| eth1. (br2,br3,etc) trunk---switch
Internet---| OpenVPN  |
                      |
                      | {eth2}
                      |<--TUN {site A}...Trunk(br2,br3,br7,br8,etc)...{site B} TUN-->|{eth2} eth1 br7,br8,etc.)
                                                                                     | 
                                                                                     | 
                                                                                     | {Gateway2}--eth1 (br7,br8,etc.) trunk---switch
                                                                                     | eth0
                                                                                     | {Internet}

This could be done?

Instead of using PC1 and PC2: Mikrotik RB750 EoIP. But I do not want two extra device to operate. The current means and OpenVPN you want to solve the task.
.

szistvan

I have two site where i uses openvpn. I use dot1q in both side with the same vlans.

I would like to bridge the two site's layer2 traffic whit each other to use the same vlans on the sites.

So i try to search a solution with OpenVPN how can i configure it to bridge the two site's layer2 traffic (similar to EoIP feature in Mikrotik)

Example:

vlans === [ switch ] - dot1q trunk -- openvpn --- INTERNET --- openvpn -- dot1q trunk - [ switch ] === vlans

Thanks