OpenVPN Support Forum

I am working with tap-9.9.2 driver (provided by OpenVPN) on windows 7 ultimate. I am using tap standalone, without openvpn setup scripts and other openvpn stuff. In brief, I used tap-9.9.2.exe

Previously I have setup network profile using TAP and ICS feature, to access internet in the subnet, using ICS it assigns 192.168.137.1 IP address to TAP adapter.

Now, the same approach I want to use for multiple subnets, i.e. for 192.168.137.1/24 and 10.0.0.1/24 (or something else). Can anyone please suggest how to setup ICS for multiple TAP adapter present over a single host ?

I could not find any options related to my requirement in ICS properties menu. I also tried to use bridge setup (real LAN and TAP in a bridge), But this didn't worked and I wasn't able to assign IP using DHCP to guest operating system which uses host tap device to access internet.

Requirement (In brief):

TAP-Adapter-1 : 192.168.137.1/24
TAP-Adapter-2: 10.0.0.1/24
Local Area Connection (real ethernet) : 10.10.x.x

I want to route traffic initiated by Tap-Adapter-1 and TAP-Adapter-2 via real ethernet. IP addresses of TAP are arbitrary.

Consider TAP-1 has initiated ICMP echo request for Google IP, then while leaving windows host system, IP address in the ethernet frame should be overwritten by IP address of real ethernet, And if response returned then it should return back to TAP-1.

This is basic test for my setup. It works for single adapter using ICS. But I want this setup the same for both adapters.


Kindly help for configurations that I have to do for my aforementioned requirement.

I don't believe you need to use ICS for this:

I have for example:

• eth0: 10.1.101.101/24 gw 10.1.101.1
  tap2: 10.1.102.101/24 gw 10.1.101.1
  tap3: 10.1.103.101/24 gw 10.1.101.1
  
  Set the adapters with fixed IP (no DHCP)
  Set media state to 'always connected'
  
  Add routes for 2nd & 3rd subnets where required:
  route 10.1.102.101/32 via 10.1.101.101 etc

All works fine no need to use ICS.

W7 Firewall might be a bit tricky to configure though .. good luck

Traffic wrote:All works fine no need to use ICS

I don't know how dumb W7 is but I do know WXP is so dumb many (microsoft) applications randomly bind to different local addresses ..

Just now Outlook xmit the following packet:

• src IP: 10.1.103.101
  dst IP: gmail.com
  dport: 995

The packet was then dropped by my firewall as this src ip is supposed to be for internal application only.

Good old windows