- Original Message -
From: "David Sommerseth"
To: "Jason Haar" ;
Sent: Tuesday, June 02, 2015 11:58 PM
Subject: Re: [Openvpn-users] any way to get local network details toflow
through to the server?
> On 2 June 2015 22:05:21 CEST, Jason Haar wrote:
>>Hi there
>>
>>We're using openv
On 03/06/15 10:58, David Sommerseth wrote:
> Hi, Have you looked at the --client-nat option in the man page?
Yeah - but it's an issue of only wanting it under the condition when the
local network conflicts with the corporate network. One-to-one NAT is
great but it still breaks some applications,
On 2 June 2015 22:05:21 CEST, Jason Haar wrote:
>Hi there
>
>We're using openvpn to connect employees to the corporate 10/8 network
>and hit a problem with a client who was on a hotel 10/8 network. We use
>openvpn in split-tunnel mode and unfortunately the hotel used the same
>10.X subnet as a lar
Hi,
On Wed, Jun 03, 2015 at 08:05:21AM +1200, Jason Haar wrote:
> In this case using the openvpn tunnel as the default gw should have
> solved the problem - but normal people can't figure that out - so I'd
> like to solve it dynamically at the server end. However, to do that, the
> server would ne
Hi all,
On 2015-06-02 at 22:40 Mathias Jeschke wrote:
> AFAIK, this is not possible, but you have options from my pov:
>
> (1) Deploy 2 OpenVPN configurations to your users - one for split
> tunnel and one without (redirect-gw).
Forget this option - the redirect-gateway does not work at al
Hi Jason,
On 2015-06-02 at 22:05 Jason Haar wrote:
> In this case using the openvpn tunnel as the default gw should have
> solved the problem - but normal people can't figure that out - so I'd
> like to solve it dynamically at the server end. However, to do that, the
> server would need to know i
Hi there
We're using openvpn to connect employees to the corporate 10/8 network
and hit a problem with a client who was on a hotel 10/8 network. We use
openvpn in split-tunnel mode and unfortunately the hotel used the same
10.X subnet as a large server subnet range we use - so the user couldn't
re
Hello Gert,
Hey I 've got it working! Yes, setting rp_filter=0 solves the problem. Many
thanks for your help!
Gert Doering writes:
> Hi,
>
> On Tue, Jun 02, 2015 at 06:38:59PM +0800, Zesen Qian wrote:
>> Is using tap instead of tun my only choice? As I 've already seen
>> packets flowing out of
Hi,
On Tue, Jun 02, 2015 at 06:38:59PM +0800, Zesen Qian wrote:
> Is using tap instead of tun my only choice? As I 've already seen
> packets flowing out of the tun interface in the server end, the only
> problem is that the packets is not forward to another interface.
Might be rp_filter getting
Hello Bonno,
Is using tap instead of tun my only choice? As I 've already seen
packets flowing out of the tun interface in the server end, the only
problem is that the packets is not forward to another interface.
I 'm told that tap is of more overhead, so I prefer tun if possible.
Bonno Bloksma w
Hi,
Zesen Qian wrote:
> Hello Bonno,
> Thanks for your help! Now I 've setup a working site-to-site config and
> I can ping from one site to another site. There still a small problem,
> though.
> Since it's a site-to-site config, I don't really need any IP address on
> either end of the tunnel. Th
Hi,
On Tue, Jun 02, 2015 at 09:27:41AM +0100, Sebastian Arcus wrote:
> > (See https://community.openvpn.net/openvpn/ticket/523 for a detailed
> > description what happens - though usually the scenario is slightly
> > different, with /etc/resolv.conf being modified and not automatically
> > re-read
On 01/06/15 18:06, Gert Doering wrote:
> Hi,
>
> On Mon, Jun 01, 2015 at 04:56:59PM +0100, Sebastian Arcus wrote:
>> Could anyone throw some light on this please. I've noticed this problem
>> for a long time. If openvpn on the client starts before Internet
>> connectivity, and the 'remote' directiv
13 matches
Mail list logo