Hi Joe On Thu, Jul 24, 2014, at 09:55 AM, Joe Patterson wrote: > But, if for some reason you can't or really don't want to do that ...
Being a bit more specific abt my *goal* state ... I will have a single SERVER. It'll eventually have a config of: @VPN_SERVER IP(eth0) = "S.S.S.S" external/WAN intfc = 192.168.0.1 = 172.16.0.1 = 10.10.0.1 IP(tun1) = 10.0.0.1 vpn tunnel endpoint There will be 3 CLIENTS @VPN_CLIENT_A IP(eth0) = "CA.CA.CA.CA" external/WAN intfc IP(eth1) = "192.168.1.1" internal/LAN intfc IP(tun1) = 10.0.0.2 vpn tunnel endpoint @VPN_CLIENT_B IP(eth0) = "CB.CB.CB.CB" external/WAN intfc IP(eth1) = "172.16.1.1" internal/LAN intfc IP(tun1) = 10.0.0.3 vpn tunnel endpoint @VPN_CLIENT_C IP(eth0) = "CC.CC.CC.CC" external/WAN intfc IP(eth1) = "10.10.1.1" internal/LAN intfc IP(tun1) = 10.0.0.4 vpn tunnel endpoint There will be servers on each client's LAN @LAN_A_SERVER IP(eth0) = "192.168.1.100" external/LAN intfc @LAN_B_SERVER IP(eth0) = "172.16.1.100" external/LAN intfc @LAN_C_SERVER IP(eth0) = "10.10.1.100" external/LAN intfc As a nominal, 1st step, I want to make sure that I'll be able to: @VPN_SERVER, ping -> LAN_A_SERVER[192.168.1.100] @VPN_SERVER, ping -> LAN_B_SERVER[172.16.1.100] @VPN_SERVER, ping -> LAN_C_SERVER[10.10.1.100] and @LAN_A_SERVER, ping -> @VPN_SERVER[192.168.0.1] @LAN_B_SERVER, ping -> @VPN_SERVER[172.16.0.1] @LAN_C_SERVER, ping -> @VPN_SERVER[10.10.0.1] Obviously, gotta get the routes complete & correct! I'd *ALSO* like to keep things tidy, ala @SERVER main config ONLY server-specific conf ccd/clientA.conf ALL/ONLY Client_A-/LAN_A-specific conf ccd/clientB.conf ALL/ONLY Client_B-/LAN_B-specific conf ccd/clientC.conf ALL/ONLY Client_C-/LAN_C-specific conf > ... horrible cringe-worthy kluge that should be avoided by all sane people ... so, I'm strangely drawn to that! ;-) Though, for for the sake of correctness, if not sanity. I'd like to hear a bit more re: approaches to doing THAT ^^ *AND* keeping config neat & tidy. PG ------------------------------------------------------------------------------ Want fast and easy access to all the code in your enterprise? Index and search up to 200,000 lines of code with a free copy of Black Duck Code Sight - the same software that powers the world's largest code search on Ohloh, the Black Duck Open Hub! Try it now. http://p.sf.net/sfu/bds _______________________________________________ Openvpn-users mailing list Openvpn-users@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-users