From owner-freebsd-questions@FreeBSD.ORG Wed May 4 21:24:15 2011 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id C1DA5106564A for ; Wed, 4 May 2011 21:24:15 +0000 (UTC) (envelope-from gull@gull.us) Received: from mail-ew0-f54.google.com (mail-ew0-f54.google.com [209.85.215.54]) by mx1.freebsd.org (Postfix) with ESMTP id 5379D8FC12 for ; Wed, 4 May 2011 21:24:15 +0000 (UTC) Received: by ewy1 with SMTP id 1so652191ewy.13 for ; Wed, 04 May 2011 14:24:14 -0700 (PDT) MIME-Version: 1.0 Received: by 10.14.6.10 with SMTP id 10mr740995eem.117.1304544254131; Wed, 04 May 2011 14:24:14 -0700 (PDT) Received: by 10.14.47.11 with HTTP; Wed, 4 May 2011 14:24:13 -0700 (PDT) X-Originating-IP: [64.81.163.112] In-Reply-To: References: <201105040519.56695.geoff@apro.com.au> Date: Wed, 4 May 2011 14:24:13 -0700 Message-ID: From: David Brodbeck To: krad Content-Type: text/plain; charset=ISO-8859-1 Cc: Kevin Wilcox , Free BSD Questions list , geoff@apro.com.au Subject: Re: Can I bridge the same subnet across a VPN? X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 04 May 2011 21:24:15 -0000 On Wed, May 4, 2011 at 8:19 AM, krad wrote: > you can do this with a combination of openvpn (using tap, not tun) and > if_bridge both ends. However I have found it to be flakey and not really > worth the effort. Better to go with a routed solution. The problem I've always found with bridged solutions is they don't cope well under heavy traffic loads when the VPN link is slower than the LANs they're bridging between. And the VPN link is usually slower if it's over a WAN. The link tends to get saturated.