-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Eric, Hi *,
I think that your example configuration is incomplete, i think that: > If I have four sites that I want to VPN together... A, B, C, and D > > Systems at B, C, and D need to see systems at A and systems at A need to > see systems at B, C, and D - so I'd set A up as the OpenVPN server in > eBox with B, C, and D as clients, ebox-to-ebox tunnels checked, and A's > internal network advertised to the OpenVPN subnet on eBox A, right? > in that case a think that the example could be like that: Site A - eBox OpenVPN server, ebox-to-ebox tunnels checked - internal A network advertised to the OpenVPN subnet on eBox A - client OpenVPN connection to Site B - client OpenVPN connection to Site C - client OpenVPN connection to Site D Site B - eBox OpenVPN server, ebox-to-ebox tunnels checked - internal B network advertised to the OpenVPN subnet on eBox B - client OpenVPN connection to Site A Site C - eBox OpenVPN server, ebox-to-ebox tunnels checked - internal C network advertised to the OpenVPN subnet on eBox C - client OpenVPN connection to Site A Site D - eBox OpenVPN server, ebox-to-ebox tunnels checked - internal D network advertised to the OpenVPN subnet on eBox D - client OpenVPN connection to Site A > In addition if systems at B need to see systems at C and systems at C > need to see systems at B... but systems at D don't need to (and perhaps > shouldn't) see anything at B or C then would I configure an OpenVPN > server in the eBox systems at either B or C in addition to the client > connection to A? with ebox-to-ebox tunnels on and the other as a client? > In that case i think that you have to add this configuration: Site B - client OpenVPN connection to Site C Site C - client OpenVPN connection to Site B - -- Kevin Josue Zambrano Chavez Linux Counter #395394 -> http://counter.li.org/ Si la base de la sociedad es ayudar a los demas, porque decir no a la libertad de modificar y compartir el software? (Richard Stallman) La imaginacion es mas importante que el conocimiento (Albert Einstein) -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHzwq2EhUlZVlmZMQRAoPBAKCIhXymufVIa5SX4ZAaUVs0+mEfKQCg/oWr L8ZHF/ojkbxDfUVediWt9Qk= =ulNy -----END PGP SIGNATURE----- _______________________________________________ Ebox-user mailing list [email protected] https://lists.warp.es/mailman/listinfo/ebox-user
