bvillers@tampabay.rr.com * * * Newbie * * * Having trouble bridging TAP Community OpenVPN 2.4.7 on CentOS 7 VM on Windows 2012 R Hyper-v physical box has two NICs Behind Endian Firewall Started using TUN (would prefer TUN for security); TUN is problematic because users want to have mapped network drives. Switched to TAP I'm not sure which bridging routine to use -- Do I need to use Proto TCP if I use TAP? Or, does UDP work with TAP SERVER CONFIG: local xxx.yyy.zzz.111 port 1194 proto udp dev tap cd /etc/openvpn server-bridge x.y.z.0 255.255.255.0 x.y.z.27 x.y.z.33 push "route-gateway x.y.z.1" push "route x.y.z.0 255.255.255.0" writepid /etc/openvpn/openvpn.1.pid reneg-sec 3600 verify-client-cert require plugin /usr/lib64/ope...in-auth-pam.so login ca /usr/sh...ki/ca.crt cert /usr/...i/issued/CMEVPN.crt key /usr/sha...ivate/srv.key dh /usr/s.../dh.pem topology subnet push "dhcp-option DNS x.y.z.1" push "dhcp-option DNS x.y.z.2" push "dhcp-option DNS x.y.z.3" ifconfig-pool-persist ipp.txt remote-cert-tls client keepalive 10 120 tls-auth ta.key 0 # This file is secret cipher AES-256-CBC auth SHA256 compress lz4-v2 push "compress lz4-v2" max-clients 35 user nobody group nobody persist-key persist-tun status openvpn-status.log log openvpn.log verb 6 explicit-exit-notify 1 askpass /.../pa CLIENT CONFIG local x.y.z.128 port 1194 client dev tap proto udp remote fqdn.com 1194 auth-user-pass persist-key persist-tun capath "C:\\Program Files\\OpenVPN\\config\\" ca ca.crt cert client-.crt key client-.key remote-cert-tls server tls-auth ta.key 1 cipher AES-256-CBC compress lz4-v2 status openvpn-status.log log openvpn.log verb 4 redirect-gateway def1
TinCanTech bvillers@tampabay.rr.com wrote Do I need to use Proto TCP if I use TAP? Or, does UDP work with TAP Either will work.
bvillers@tampabay.rr.com A requirement is that a VPN client needs to be able to access their "mapped network drives" as if they are on the network. Currently, our Endian firewall (using a scaled down version of OpenVPN) pushes an IP (one of a reserved set of 20 IPs within our /24 domain IPs) to the client. And, the client can access any machine on the network. The "gateway" is the firewall. Now, I am setting up an OpenVPN server within the domain. The firewall NATs port 119x to the new OpenVPN server. Currently, I can only hit the OpenVPN server successfully. I need to assign the VPN client an IP on our domain and then redirect back to the firewall gateway. I'm not sure that this is clear. Let me know.
