Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-21 Thread Gert Doering
Hi, On Thu, Nov 21, 2013 at 06:28:02PM -0500, Ryan Whelan wrote: Does the IPv6 implementation in OpenVPN track multicast memberships? Since I'm using all IPv6, any IGMP snooping implementation wouldn't be of much use. Does OpenVPN just broadcast all the ICMP multicast messages? No, as Andy

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-21 Thread Andy Wang
From: Ryan Whelan [mailto:rcwhe...@gmail.com] Sent: November-17-13 2:32 AM To: Gert Doering Cc: openvpn-users@lists.sourceforge.net Subject: Re: [Openvpn-users] IPv6 client-to-client communication The reason I'd been using tap was because the multicast router (mrd6) didn't seem to be working

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-18 Thread Gert Doering
Hi, On Mon, Nov 18, 2013 at 11:44:36AM +0100, David Sommerseth wrote: On Sun, Nov 17, 2013 at 03:17:05PM -0500, Ryan Whelan wrote: Would it be difficult to modify OpenVPN so it allocated a TAP/TUN per client on connection, so each virtual interface was connected to a single client?

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-18 Thread Gert Doering
Hi, On Mon, Nov 18, 2013 at 09:30:51AM -0500, Ryan Whelan wrote: Would it be possible to spawn multiple processes, one for each client/tun/tap (with some configurable limit possibly)? It would also help with multiprocessing! I have some machines with multiple processors which are mostly a

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-18 Thread David Sommerseth
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 18. nov. 2013 15:30, Ryan Whelan wrote: Would it be possible to spawn multiple processes, one for each client/tun/tap (with some configurable limit possibly)? It would also help with multiprocessing! I have some machines with multiple

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-17 Thread Gert Doering
Hi, On Sun, Nov 17, 2013 at 02:31:33AM -0500, Ryan Whelan wrote: The reason I'd been using tap was because the multicast router (mrd6) didn't seem to be working with tun. (the clients will be sending multicast traffic) I'm only slightly familiar with multicast and barely anymore familiar

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-17 Thread Ryan Whelan
Would it be difficult to modify OpenVPN so it allocated a TAP/TUN per client on connection, so each virtual interface was connected to a single client? (removing it on client disconnect/drop) This is going to be a shared environment and the ability to apply security to individual interfaces via a

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-17 Thread Gert Doering
Hi, On Sun, Nov 17, 2013 at 03:17:05PM -0500, Ryan Whelan wrote: Would it be difficult to modify OpenVPN so it allocated a TAP/TUN per client on connection, so each virtual interface was connected to a single client? (removing it on client disconnect/drop) Significantly so. The code

[Openvpn-users] IPv6 client-to-client communication

2013-11-16 Thread Ryan Whelan
I have a (tap) server setup with `topology subnet` and an IPv6 pool configured `server-ipv6 fdda:ba64:dcdc:1::1/64' Clients can connect, get IPv6 addresses and ping the server on the address it assigns its tap interface (fdda:ba64:dcdc:1::2). The clients can not communicate with one another-

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-16 Thread Gert Doering
Hi, On Sat, Nov 16, 2013 at 11:45:37PM -0500, Ryan Whelan wrote: With 2 clients connected with the addresses fdda:ba64:dcdc:1::1002 and fdda:ba64:dcdc:1::1001, when trying to ping from one to the other, I can see the NDP traffic on the server's tap interface- 03:55:01.978033 IP6

Re: [Openvpn-users] IPv6 client-to-client communication

2013-11-16 Thread Ryan Whelan
The reason I'd been using tap was because the multicast router (mrd6) didn't seem to be working with tun. (the clients will be sending multicast traffic) I'm only slightly familiar with multicast and barely anymore familiar with IPv6; is there a better method to handle multicast traffic from the