From: "Bruno Tréguier via Openvpn-users" 
<openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>>
Date: Monday, 14 August 2023 at 17:01:19
To: "openvpn-users@lists.sourceforge.net" 
<openvpn-users@lists.sourceforge.net<mailto:openvpn-users@lists.sourceforge.net>>
Subject: Re: [Openvpn-users] A question about the local statement

Hello,

Le 14/08/2023 à 15:59, Jason Long via Openvpn-users a écrit :
> Hi,
> Thank you so much.
> But I am sure that in a real environment such a scenario can also exist.
> Consider an internal network where users connect to an internal OpenVPN 
> server and this server has several NICs with different IP addresses that are 
> connected to the Internet. Now you want to connect a group of users to a 
> specific NIC. For example, users with an IP address in the range of 
> 192.168.1.0-254 should connect to a NIC with an IP address of 10.0.0.10, and 
> the rest of the clients with other ranges should be connected to other NICs.
> What are you doing?

Route and/or NAT things correctly...

Even before considering OpenVPN or any other VPN mechanism, make sure
everything is correctly routed. Each client machine should be able to
ping (if you allow ICMP echo/reply) the VPN server they should be
connecting to. If necessary and if possible, allow it temporarily to
make sure the routes are correctly set up.

What I mean is that, as I understand things, and as tincantech just told
you, your issue is *not* OpenVPN-related. It's a basic network problem.
Make sure everything is ok network-wise before trying to use
applications, especially ones which are sometimes tricky to set up.

Regards, Bruno


_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

What you said IS true, if no firewall is around.
ICMP might be allowed, while (non-default) upd or tcp ports might be blocked…

Just my €0,02 🤓

Dit bericht kan informatie bevatten die niet voor u is bestemd. Indien u niet 
de geadresseerde bent of dit bericht abusievelijk aan u is toegezonden, wordt u 
verzocht dat aan de afzender te melden en het bericht te verwijderen. De Staat 
aanvaardt geen aansprakelijkheid voor schade, van welke aard ook, die verband 
houdt met risico's verbonden aan het elektronisch verzenden van berichten.

This message may contain information that is not intended for you. If you are 
not the addressee or if this message was sent to you by mistake, you are 
requested to inform the sender and delete the message. The State accepts no 
liability for damage of any kind resulting from the risks inherent in the 
electronic transmission of messages.
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to