Илья Шипицин schreef op 02-10-2017 21:00:
LAN1 and LAN2 are just different floors in a single building.
I don't know where you get that idea.
If a VPN only provides gateway for VPN connected devices that's one
thing.
If a VPN provides routes for LANS that's another thing.
Those routes can be equivalent to ordinary ones. Ie.
192.168.0.0/24 dev eth0 src 192.168.0.30
Is a direct route to the network a client is on.
If
192.168.1.0/24 is a different subnet, then it requires routing.
192.168.1.0/24 via 192.168.0.1 dev eth0
Now you can suggest that this route doesn't exist. Then you can add it.
DHCP clients are capable of delivering additional routes. If it ever
became a problem, the server can just give those routes to every client.
So your VPN routes:
192.168.0.0/24 via 10.8.0.1 dev tun0
192.168.1.0/24 via 10.8.0.1 dev tun0
Become equivalent and can compete in terms of metric.
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users