Hi,
since 2006 we are using openvpn in topology net30, use all rfc1918
networks and configure the openvpn server process like this:
ifconfig 172.16.0.1 172.16.0.2
topology net30
and clients like this:
ifconfig-push 10.0.1.22 10.0.1.21
topology net30
ifconfig-push 172.21.5.222 172.21.5.221
topology net30
Routes into the server and routes, push commands to the client are set
by an external process.
Connected to our plattform are all operating systems with a wide variety
of openvpn versions.
Now net30 is deprecated and subnet will be the recommended way in future.
What is about p2p? In the past Arne wrote: "Currently P2P mode of
OpenVPN is on of the few places that cannot negotiate
modern OpenVPN features." Will it be save to use it in future or is it
the next deprecated topology?
subnet vs p2p from my point of view:
- With topology subnet I allways see that subnet as an route set on
client side. Can I bypass this behavior?
There was an attempt from David in 2016.
http://git.infradead.org/users/dwmw2/openconnect.git/commitdiff/95da6b6cd15d574
- Windows can't do p2p or is it the TAP driver for windows?
Is it possible to use both topologies on one openvpn server process?
Is it possible to use small subnet topologies /31 and push the first IP
from that net as route-gw? Is this possible with windows?
Thank you in advance for any hint in this!
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users