Re: openvpn 1.6: win2k client on linux server (fedora1)

aloha

again me

> use a private ip for the tunnel, both on the client and server. Dont 
use any ip that
> eth0 already uses, either on the client or server.
> Then if you want to, use iptables to create a static NAT of the 
public ip to the tunnel
> interface.


a.b.c. is the main network, where the router resides.

i dont understand what i have to do to make it work with win2k client, 
one nic and linux openvpn server.

---
how my linux boxes work? - i have linux fedora client with two NICs, 
same as the the openvpn server. one NIC has private ip on each box, and 
public ip a.b.c.d and a.b.X.Z for their separate respective networks. 
openvpn connection is initiated thru the private ip addreses 
(192.168.255.1 - vpnserver and 192.168.255.10 -vpnclient). tunnel ip 
addreses between the fedora vpn client and fedora vpn server are 
172.16.0.5 and 172.16.0.6 respectively. the users on the public network 
on the side of the fedora openvpn client are using internet - thats 
a.b.X.Z ;

on the vpn client:
route a.b.c.0 255.255.255.0 172.16.0.5

with this i route the traffic for a.b.c. from the linux vpn client to 
the tunnel. all works well. packets arrive...


on the vpn server:
route a.b.X.Z 255.255.255.224 172.16.0.6

and based on the route set on the server i get internet on the network 
on the side of the vpn client and all that works thru the tunnel - i'm 
tracing the RX & TX on the tunnel...that means i'm routing traffic for 
a.b.X.Z network thru the tunnel.
...but if i ssh on the vpn client and try to ping the router (a.b.c.Q) i 
wont get response but thats understandable, no route on the server like 
the one mentioned above...

i dont know if i'm clear...but i'm trying to solve this and i might be 
confused and missing something very simple....

how i do that with single NIC and win2k client? its not clear to me 
about NAT issue too? i'm aware of the concept but not the way i should 
be using, if it is the solution to my problem? do i set up alias? i've 
tried....but no success ..



please advise

smiles

Darko


-------------------------------------------------------
This SF.Net email sponsored by Black Hat Briefings & Training.
Attend Black Hat Briefings & Training, Las Vegas July 24-29 - 
digital self defense, top technical experts, no vendor pitches, 
unmatched networking opportunities. Visit www.blackhat.com