-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 I took the following snippet from the config recipe in Jan's OpenVPN Cookbook. I need to customize in that my VPN server is not part of a LAN. It is assigned a static public IP.
Here is the config from the book: ifconfig 10.0.0.18 255.255.255.240 ifconfig-pool 10.0.0.20 10.0.0.25 push "route 10.0.0.27 255.255.255.255 net_gateway" push "route-gateway 10.0.0.30" push "redirect-gateway def1" In my case, I have a pool of 5 IP's starting at X.X.X.17 and ending at X.X.X.22. My default gateway is X.X.X.23 and my subnet mask is 255.255.255.248. The VPN server is at X.X.X.17. This is what I've come up with for a config: ifconfig X.X.X.17 255.255.255.248 ifconfig-pool X.X.X.18 X.X.X.22 push "route 127.0.0.1 255.255.255.255 net_gateway" push "route-gateway X.X.X.23" push "redirect-gateway def1" Does this look right and, assuming that the rest of the config is correct, will this allow VPN clients to connect, be assigned a PUBLIC IP address, and reach and be reached by the Internet? Thanks! Anthony - -- Anthony Papillion XMPP/Jabber: [email protected] SIP: [email protected] PGP Key: 0x53B04B15 -----BEGIN PGP SIGNATURE----- iQIcBAEBCAAGBQJS7YGFAAoJEAKK33RTsEsVgJsP+wWx0cSf5CfK8sABYrWuramH aJ2RKVKxIxvhsIOja6nnLpSCP3qx2hY9NP1olDbBah6dGuMyJ2RehIpjzt7fCb/e V9wrRBitVYh3gM5aEHWCsX9JvH6g8bppxplaYrV12WeBve9HnycqrNYuSyifLJTz X9NYAOaR8F1FPRAvZEdOjB16lnc/W3YZLiU+i4+Vb1HP3WoDuX55muh6ml74mWPJ FyQK6T4MMWfJSSKy4CKU1VQpBvp0TJwUxHLRdqRuFOvhEumJPgX2aBVBO7LSl7xz WunhJ6EOYY2ReQ26c1A3ClraK4K6Q4JV0ZDPp8kZA4TLvreTUtQLaZ3u+9p0kiMj DdQHttq0bCIjq2NCLTnmgdJJ6dpbM7S7y+hlmPPeOSgiutTaelktVovYrNaeoUsP sqoDGQbESh8vfdYmO52Ujeqatkb+W3JZ3U99AC6q7L6fJ+pim2AZICwfqVLU3g0J Behq+4ArYAfz+1G0gy23cdY6RJgcqVBQHbC9eX84B9aSRMO80urja1xB0E+gHdxQ rUp573bMXvo3Qw4UvJTGP+Sya/yXwidfY8JEuPjteU4AvI/+J47JnbcBgKJjHIzA ELHW2aEwwS9bBGf2321r4rPavdYdv+kWr6b0N5Rb0/2OLHJL0Wh6j1l5sLx8Lkxa hj8xybvhNEpqPOmYRwkN =apF4 -----END PGP SIGNATURE----- ------------------------------------------------------------------------------ WatchGuard Dimension instantly turns raw network data into actionable security intelligence. It gives you real-time visual feedback on key security issues and trends. Skip the complicated setup - simply import a virtual appliance and go from zero to informed in seconds. http://pubads.g.doubleclick.net/gampad/clk?id=123612991&iu=/4140/ostg.clktrk _______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
