openvpn configuration

[Kerry Hoath]

Firstly:
understand the difference between tun and tap.
You must use the *same* on both ends, tun for routed vpn, tap for bridged.

decide whether you want routed or bridged and set up accordingly.
Info on openvpn.net on which is bbest, routed is more scalable and there are 
tricks to hand out a default gateway on a bridged setup.

these tricks may or may not work with Windows openvpn client see faq files.

I'd set up dev tun on both ends and make sure you can see the other end of 
your tunnel.
Best to make connectivity work before you mess with default routes etc.

Is it worth noting here that you are probably violating policy by punching 
holes through a firewall?
be aware in case admin comes down on you.

Regards, Kerry.



----- Original Message ----- 
From: "Tyler Littlefield" <tyler at tysdomain.com>
To: "Speakup is a screen review system for Linux." <speakup at braille.uwo.ca>
Sent: Friday, May 15, 2009 3:08 AM
Subject: openvpn configuration


> Hello list,
> I'm currently trying to get openvpn going. I have the port open, but it's 
> not letting me forward all traffic through, for some reason. Any ideas? 
> I've provided my configs below
> #server:
> dev tun
> secret static.key
> keepalive 10 60
> ping-timer-rem
> persist-tun
> persist-key
> user nobody
> group nobody
> daemon
> plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so login
> push "redirect-gateway def1"
> #client:
> dev tap
> remote tds-solutions.net
> secret C:/static.key
> keepalive 10 60
> ping-timer-rem
> persist-tun
> push "redirect-gateway def1"
> resolv-retry infinite
> nobind
> proto udp
> I want to be able to connect from multiple sources, so I used dev tap.
>
> Thanks,
> Tyler Littlefield
> Web: tysdomain.com
> email: tyler at tysdomain.com
> My programs don't have bugs, they're called randomly added features.
> _______________________________________________
> Speakup mailing list
> Speakup at braille.uwo.ca
> http://speech.braille.uwo.ca/mailman/listinfo/speakup
>