Hi,
I am running OpenVPN in TAP mode. OpenWRT router is the OpenVPN client and Red Hat Enterprise Linux 7.3 is the Server.
When tunnel is established, tap0 interface on the Wifi Router got IP address from OpenVPN server while tap0 interface on RHEL is bridged to br0
and br0 has static IP address. br0 address pushed by OpenVPN server as the default gateway for the WIFI router. WIFI clients that are connected to the router are surfing via the tunnel. When I monitor the traffic on OpenVPN server side using tcpdump on tap0 I see Ehternet frames but source MAC is the MAC of Wifi router tap0.
I want to see the original MAC addresses of the Wifi stations.
Example of similar problem: when you want to run DHCP server on remote LAN and you want to see MAC addresses of the stations and not of the tap interface.
It there any possible solution for that?
Topology:
Client configuration:
[oconf=]
client
dev tap
proto tcp
remote 212.212.212.121 1194
resolv-retry infinite
nobind
persist-key
ca ca.crt
cert client.crt
key client.key
ns-cert-type server
tls-auth ta.key 1
cipher AES-256-CBC
comp-lzo
verb 3
log /tmp/openvpn.log
[/oconf]
Server configuration:
[oconf=]
port 1194
proto tcp
dev tap0
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh2048.pem
up /etc/openvpn/up.sh
down /etc/openvpn/down.sh
script-security 3
server-bridge 2.2.2.2 255.255.255.0 2.2.2.1 2.2.2.1
push "redirect-gateway def1"
push "dhcp-option DNS 8.8.8.8"
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC # AES
comp-lzo
max-clients 10
user root
group root
persist-key
persist-tun
status /etc/openvpn/server/openvpn-status.log
log /etc/openvpn/server/openvpn.log
verb 4
tcp-nodelay
[/oconf]
Thanks and BR
Igor
