Hi all,

I have an internal LAN and I'd like to provide VPN (or at least VPN-like) access to it for a limited set of users. On the internal LAN I'm providing NFS/NIS access, as well as running a set of distributed simulations that communicate using UDP broadcast packets.

I've seen some people have success tunneling TCP based services through ssh, and I've been doing some of that, but my big problem is allowing access to the UDP broadcast traffic without actually broacasting it on external switches. What I'd like to do is allow an external user to connect into the private LAN, get an internal IP, and be able to work just like they were on the private LAN, but have the UDP traffic unicast to their PC.

So how do I get from A to B?

Thanks!!!!


-Max

i guess you just want a bridged vpn? http://openvpn.net/bridge.html

I don't want to hijack the OP thread but I'm having the same kind of problem in choosing a particular openVPN setup is to find one that fits my particular needs.

Here's my case.

My Home LAN 1 (the Greeks) has 5 dual-boot PCs (pantheon, athena, apollo and zeus mostly run FC6 while poseidon usually runs XP Pro) and a network printer (hestia). The computers and the DLink switch-router on the Greek network use IPs 192.168.1.{1-99}

My Dad's Home LAN 2 (The Romans) is located in a distant city. The Roman LAN has 2 PCs -- jupiter, running FC6, mercury running XP Home -- and 2 Macs -- mars (10.4.x PPC) and venus (OS X 10.4.x Intel). The computers on the Roman network use IPs 192.168.1.{100-199}, except for a DLink switch-router (192.168.1.1).

Both LANs are natted and use the same cable ISP. While technically, the two networks are connected to the Internet via dynamic IPs, the addresses seldom change.

Both LANs have internal DNS servers where delegated subdomains are handled {greek,roman}.example.com. Second-level domain name (example.com) is handled by a commercial provider, the example.com zone contains 'A' entries for greek.example.com and roman.example.com.

Now, I'd like to create an encrypted static route between zeus.greek.example.com and jupiter.roman.example.com in such a fashion that traffic would flow this way (same subnet), without having to manage clients on poseidon or venus (if I can help it) :

Would this be a routed or bridged network? Would it work? If so, where do I start?

This did the trick. Thanks!!!