Hello,

Thank you for your reply:

On Mon, May 20, 2019 at 07:46:11PM +0200, Jan Just Keijser wrote:
> you'd have to disable 'client-to-client' , enable IP forwarding on your
> server and set up the appropriate routing and iptables rules. Packets should
> essentially "leave" openvpn and be handed off to the kernel. The kernel may
> then decide to feed them back into OpenVPN (via the tap i/f again) based on
> routing rules.

Actually this works, if I add:

   brctl hairpin br0 tap0 on

thank you for your suggestion.

> as you are running a tap-style network I'd think this should "just work" :  
> the Linux kernel sees the tap device as "just another ethernet " device .

According to this:
   
https://ente.limmat.ch/kb/linux/networking/bonding_vlan_bridge_tap_config.html
it should work

I haven't tried it yet, though.

Have a nice week.



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to