I would like to forward multicast video through the vpn. The vpn server would have 2 physical interfaces. One facing the video network and one facing the internet through a router configured with 1to1 Nat. The goal is to replace the now retired Sling technology that would allow me to watch tv from my home stb from anywhere. The path would be: Video Network --> OpenVPN Server --> Natted 1to1 Internet --> OpenVPN client --> stb (set top box). The few details I have found state that I need to use TAP and build a bridge between server and client but I'm not finding anything on how to get the multicast traffic from the video interface to the public facing interface and then out the client. I am using linux for the server side and mikrotik for the client side. Is there a sample config out there that would give me a place to start?
Thanks for the reply and link. It gave me a good starting place.
Re: multicast video through vpn
Posted: Wed Dec 07, 2022 3:55 pm
by Bryan00
Hoping I can get some help with the basics. I've read numerous pages about getting a DHCP server on the server lan to hand out IPs to the remote clients but I'm having no luck. I've tried on both Windows and Linux. Windows will connect but no IP. Linux will not connect.
I have br0 created with only the lan port in the bridge then have a script that openvpn runs to add TAP0 to the bridge. TAP0 state always shows "UNKNOWN" but when I start openvpn (not setup as a service), I can see where it builds the TAP interface and it says it goes into the forwarding state.
From the server I can ping the DHCP server and br0 pulls an ip from it.
When I set a gatweway on the windows remote client, I can see the arp traffic show up on the server lan interface but never a reply from the dhcp server.
I have set IP forwarding to enabled on the server
Firewall is disabled until I get it working without it.
I do need TAP for this configuration to get multicast working (if I ever get to that point)
Server_Conf
;mode server
tls-server
;local a.b.c.d
# TCP or UDP server?
;proto tcp
proto udp4
dev tap0
;dev tun
;dev-node MyTap
ca ca.crt
cert server.crt
dh dh2048.pem
;topology subnet
;bridge 10.8.0.0 255.255.255.0
;ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
server-bridge
;route-default-gateway 172.16.96.1
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
;push "route 224.0.0.0 240.0.0.0"
;push "route 172.16.96.0 255.255.254.0"
;push "route 172.16.150.0 255.255.255.0"
;push "route 192.168.145.0 255.255.255.0"
;push "route-gateway 192.168.145.1"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
;client-config-dir ccd
;route 10.9.0.0 255.255.255.252
;learn-address ./script
;push "redirect-gateway def1 bypass-dhcp"
;push "dhcp-option DNS 208.67.222.222"
;push "dhcp-option DNS 208.67.220.220"
;client-to-client
;duplicate-cn
keepalive 10 120
tls-auth ta.key 0 # This file is secret
cipher AES-256-CBC
;compress lz4-v2
;push "compress lz4-v2"
;comp-lzo
max-clients 2
user nobody
group nobody
persist-key
persist-tun
status openvpn-status.log
;log openvpn.log
log-append openvpn.log
verb 6
;mute 20
explicit-exit-notify 1
script-security 2
up "/etc/openvpn/server/up.sh nm-bridge tap0 1500"
down "/etc/openvpn/server/down.sh nm-bridge tap0"
[root@RockyVPN server]#