Isolated OpenVPN Gateway With 2 NICs?

trel4125

Hi All,

I want to configure an OpenVPN gateway virtual machine (windows) with two NICs such that NIC1 is LAN and NIC2 is a secure tunnel to a remote OpenVPN server (see drawing below). Client PC's will not be running the OpenVPN client, just using the VM NIC1 as default gateway. I want to ensure that:

- packets cannot traverse from NIC1 to anywhere other than the OpenVPN server (ie, cannot talk to any other devices on the NIC2 network)
- other devices on the NIC2 network cannot talk to NIC1, or talk to the secure tunnel (ie NIC2 cannot act as a default gateway for OpenVPN tunnel traffic)

Any pointers on how to achieve this?

Cheers.

krzee

trel4125 wroteHi All,
- packets cannot traverse from NIC1 to anywhere other than the OpenVPN server (ie, cannot talk to any other devices on the NIC2 network)
- other devices on the NIC2 network cannot talk to NIC1, or talk to the secure tunnel (ie NIC2 cannot act as a default gateway for OpenVPN tunnel traffic)

Any pointers on how to achieve this?

This is not handled in openvpn. Just don't allow the packets to forward between devices in your firewall.