catnip
Hello,
I have one central site with openvpn server in L2 multiuser mode (server-bridge config directive) and few distributed sites running as openvpn client. Clients are in fact routers that bridge lan to tap interface, so on server side I see multiple mac addresses per site on tap interface. Problem is all macs are available via same tap interface. Is there any way to know on server side which mac is accessing server via which tunnel? I guest I'm looking for some kind of equivalent of brctl showmacs brX as openvpn is in fact doing bridging.
I know my config can be realized differently and there would be no such problem, but my special usecase forbids use of any L3.
I'd be grateful for any feedback.
brendan
you might be looking for something more along the lines of "cdp neighbor ..." for openvpn.
the clients on the remote end (past the router) wont show in your arp table, but tracerouting to the client IP will tell you which remote client tunnel you travel down to get to that client. your arp table will map the routers tap interface mac address to their IP (as would the dhcp records if you are using that). you might be able to cobble together some sort of script to do that work for you.
