Hi,

since 2006 we are using openvpn in topology net30, use all rfc1918 networks and configure the openvpn server process like this:

ifconfig 172.16.0.1 172.16.0.2
topology net30

and clients like this:
ifconfig-push 10.0.1.22 10.0.1.21
topology net30

ifconfig-push 172.21.5.222 172.21.5.221
topology net30

Routes into the server and routes, push commands to the client are set by an external process.

Connected to our plattform are all operating systems with a wide variety of openvpn versions.


Now net30 is deprecated and subnet will be the recommended way in future.

What is about p2p? In the past Arne wrote: "Currently P2P mode of OpenVPN is on of the few places that cannot negotiate modern OpenVPN features."  Will it be save to use it in future or is it the next deprecated topology?


subnet vs p2p from my point of view:

- With topology subnet I allways see that subnet as an route set on client side. Can I bypass this behavior?

There was an attempt from David in 2016. http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/95da6b6cd15d574

- Windows can't do p2p or is it the TAP driver for windows?


Is it possible to use both topologies on one openvpn server process?

Is it possible to use small subnet topologies /31 and push the first IP from that net as route-gw? Is this possible with windows?


Thank you in advance for any hint in this!





_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to