2017-10-03 0:18 GMT+05:00 Xen <[email protected]>:
> Илья Шипицин schreef op 02-10-2017 21:00:
>
> LAN1 and LAN2 are just different floors in a single building.
>>
>
> I don't know where you get that idea.
>
it is common practice - splitting big network into several smaller networks
>
> If a VPN only provides gateway for VPN connected devices that's one thing.
> If a VPN provides routes for LANS that's another thing.
>
> Those routes can be equivalent to ordinary ones. Ie.
>
> 192.168.0.0/24 dev eth0 src 192.168.0.30
>
> Is a direct route to the network a client is on.
>
> If
>
> 192.168.1.0/24 is a different subnet, then it requires routing.
>
it is accessible via default route. that's good
>
> 192.168.1.0/24 via 192.168.0.1 dev eth0
>
> Now you can suggest that this route doesn't exist. Then you can add it.
> DHCP clients are capable of delivering additional routes. If it ever became
> a problem, the server can just give those routes to every client.
>
yes, if you distribute all of your organization routes via DHCP - it is
good.
but it is not common practice
>
> So your VPN routes:
>
> 192.168.0.0/24 via 10.8.0.1 dev tun0
> 192.168.1.0/24 via 10.8.0.1 dev tun0
>
> Become equivalent and can compete in terms of metric.
>
it is equivalent in terms of metric, however, next floor is better to be
accessed via local gateway, not a vpn gateway
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
