Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Mar 2017 10:22:22 +0700
From:      Victor Sudakov <vas@mpeks.tomsk.su>
To:        freebsd-net@freebsd.org
Subject:   OpenVPN and policy routing
Message-ID:  <20170330032222.GA18053@admin.sibptus.transneft.ru>

next in thread | raw e-mail | index | archive | help
Dear Colleagues,

Anyone experienced with OpenVPN on FreeBSD?

What would be the best way to policy route a network into OpenVPN? A
routing decision must be based on the src IP address, not the dst IP
address.

Imagine an OpenVPN client with 3 interfaces: fxp0 is the outside
interface towards the OpenVPN server, fxp1 is for LAN1 and fxp2 for
LAN2.

 From LAN1, some private networks are reachable through OpenVPN
(tun0), this is done via the regular route commands (pulled from the
OpenVPN server).

 From LAN2, *everything* should be reachable only through OpenVPN.
Which is the best way to accomplish this?

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
AS43859



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20170330032222.GA18053>