Re: OpenVPN for retro network

Gert Doering <[email protected]>
Newsgroups gmane.network.openvpn.user
Message-ID <[email protected]>
Hi,

On Thu, Feb 15, 2024 at 08:58:28PM +0000, shadowbladeee via Openvpn-users wrote:
> Before I spending more time on this can OpenVPN 2.6.3 bridged network transport all these? I would like to bridge those old VMs just like they would be on a local LAN.

"I don't know", and I'm afraid that's the best you'll get.

OpenVPN "--dev tap" will usually bridge Ethernet traffic around just fine
(for example on linux, bridge "tap0" and "eth0" together via brctl), but
I'm not sure how Linux in general and OpeNVPN in particular will deal
with odd ethertypes.

> If not what else solution can you recommend? One end on that server must be software only, can be some old cisco vpnc with a cisco appliance on the other end or kame ipsec etc.

IPSEC & friends and anything that is "layer 3" will not handle this.

Linux has (or had?) "gretap" tunnels, which basically also does remote
ethernet, only over GRE not over OpenVPN, and then you can hook said
gretap intreface into a bridge.  This would take OpenVPN out of the 
equation (in case OpenVPN is refusing cooperation), but still relies
on linux + bridge handling unusal ethertypes correctly.

Keep us informed! :-)

gert
-- 
"If was one thing all people took for granted, was conviction that if you 
 feed honest figures into a computer, honest figures come out. Never doubted 
 it myself till I met a computer with a sense of humor."
                             Robert A. Heinlein, The Moon is a Harsh Mistress

Gert Doering - Munich, Germany                             [email protected]

_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
signature.asc (application/pgp-signature, 630 B)
-----BEGIN PGP SIGNATURE-----

iQGcBAEBAgAGBQJl2IzhAAoJEB2Cnv7KVigSXCwMAJVulQ4TJe/QzMW/cN1dZw8C
DrSY2eSzbovSUYwmWL8R+u3X8jxqUWTshq133QKN5zLbG7fd5LdMA3DXETVr2ODY
fR5ouF2ObOqxRDaxifx9RvBCKO8QIdyIZ3Pl9eLCwjkvmcbZ3/5tPiG8pjDgUuQD
fm/NukuFLcYY3btzP+REuPwiosA6qKAKuGIT+PYERENq3UtKmz5TClegQFqdP5ps
QWrijg4RvU6UZpwmnP3g60+QK5L+0gcNhpHAYN3LhKUwReK4dHunqXesXBzzxTt2
7IWHYsF3z5LuiX6XAYY97pav7Hkrq3OaDiNbEZPxaWykVuaEJgkDbHja92Suywvh
vr4cSUvZS67ps18qWTAOfIE7m/bYecN9ss3iSwJu4a4e74spAvFL4DDou6uxtCHh
jkL0YV+LFVuvZLiev+yhazLBCEvFMpuBv/vY5siF4WWeWE8Brp1grKbx//jvi7tr
nnvKKy+daPXiH05E/rjEiSbc/EcZ82Tk6NaohoymPA==
=hVUz
-----END PGP SIGNATURE-----
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.