Hi Gert,
> That depends on the VPN provider (we only push specific routes to our
> employees, "split tunnel VPN").
OK, that makes sense. So default is left alone and remains pointed
at the ISP router, while more-specific routes steer traffic to the
VPN, right?
> OpenVPN will figure out how to reach the VPN server, install a host route
> for that using the old default router, and then install a new default
> route towards the VPN (either by replacing and restoring /0, or by adding
> two /1 routes).
Makes sense, but how does that play out on handsets that
restrict access to the routing table? Does the handset have
to be rooted, or can OpenVPN run by an ordinary user mess
with the routes?
> And this does not work for IPv6 yet, because nobody has written the
> "find out what my default gateway is right now, so I can add more specific
> routes to it!" code yet...
It seems in principle like it should be the same for IPv6 as
it is for IPv4, shouldn't it?
Thanks - Fred
[email protected]
On Wed, Apr 22, 2015 at 1:02 PM, Gert Doering <[email protected]> wrote:
> Hi,
>
> On Wed, Apr 22, 2015 at 12:48:28PM -0700, Fred Templin wrote:
> > When I connect my device to my ISP, I am assigned
> > a default route that points to an ISP router. But,when
> > I connect using a VPN client like OpenVPN, won't
> > OpenVPN also try to set up a default route for me that
> > points to the VPN gateway?
>
> That depends on the VPN provider (we only push specific routes to our
> employees, "split tunnel VPN").
>
> > If so, how does the networking stack know which default
> > route to use, i.e., the one that goes to the ISP router via
> > the access network or the one that goes to the VPN
> > gateway via the VPN? Or, is there some other magic
> > at work here?
>
> OpenVPN will figure out how to reach the VPN server, install a host route
> for that using the old default router, and then install a new default
> route towards the VPN (either by replacing and restoring /0, or by adding
> two /1 routes).
>
> And this does not work for IPv6 yet, because nobody has written the
> "find out what my default gateway is right now, so I can add more specific
> routes to it!" code yet...
>
> gert
>
> --
> USENET is *not* the non-clickable part of WWW!
> //
> www.muc.de/~gert/
> Gert Doering - Munich, Germany
> [email protected]
> fax: +49-89-35655025
> [email protected]
>
------------------------------------------------------------------------------
BPM Camp - Free Virtual Workshop May 6th at 10am PDT/1PM EDT
Develop your own process in accordance with the BPMN 2 standard
Learn Process modeling best practices with Bonita BPM through live exercises
http://www.bonitasoft.com/be-part-of-it/events/bpm-camp-virtual- event?utm_
source=Sourceforge_BPM_Camp_5_6_15&utm_medium=email&utm_campaign=VA_SF
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
