<div dir="ltr"><br><br>
<br><br><div class="gmail_quote">On Tue, Feb 22, 2011 at 13:07, shimi <span dir="ltr"><<a href="mailto:linux-il@shimi.net">linux-il@shimi.net</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr"><br><br><div class="gmail_quote">2011/2/22 ik <span dir="ltr"><<a href="mailto:idokan@gmail.com" target="_blank">idokan@gmail.com</a>></span><div><div></div><div class="h5"><br><blockquote class="gmail_quote" style="margin: 0pt 0pt 0pt 0.8ex; border-left: 1px solid rgb(204, 204, 204); padding-left: 1ex;">
<div dir="ltr">Hello,<br><br>I'm trying to configure openvpn to be a host to host like configuration. <br>The reason is simple, because I want to have access to the machine that is the "server".<br>The problem is, that I have many "clients" that need to be like that.<br>
<br>How can I have a host to host like approach but with multiple "client" hosts ?<br><br>My current "server" side configuration is:<br>--------------------------<br>dev tun<br>ifconfig 172.16.8.1 172.16.8.2<br>
secret /etc/openvpn/static.key<br>comp-lzo<br>keepalive 10 60<br>ping-timer-rem<br>persist-tun<br>persist-key<br>user nobody<br>group nobody<br>daemon<br>----------------------------<br><br>And my "client" settings is:<br>
-----------------------------<br>remote xxx.xxx.xxx.xxx<br>dev tun<br>ifconfig 172.16.8.2 172.16.8.1<br>secret /etc/openvpn/static.key<br>comp-lzo<br>keepalive 10 60<br>ping-timer-rem<br>persist-tun<br>persist-key<br>user nobody<br>
group nobody<br>daemon <br>-----------------------------<br><br></div></blockquote></div></div><div><br>From <a href="http://openvpn.net/index.php/open-source/documentation/howto.html#server" target="_blank">http://openvpn.net/index.php/open-source/documentation/howto.html#server</a> :<br>
<br><pre><b><b># Configure server mode and supply a VPN subnet<br># for OpenVPN to draw client addresses from.<br># The server will take 10.8.0.1 for itself,<br># the rest will be made available to clients.<br>
# Each client will be able to reach the server<br>
# on 10.8.0.1. Comment this line out if you are<br># ethernet bridging. See the man page for more info.<br>server 10.8.0.0 255.255.255.0</b></b></pre> </div></div>You build a normal server to clients; You just don't push out routes as one would normally do in a VPN server...<br>
<br>-- Shimi<br></div>
</blockquote></div><br>It helped a lot, thank you for your help.<br><br>Ido<br clear="all">LINESIP - Opening the source for communication<br><a href="http://www.linesip.com/" target="_blank">http://www.linesip.com</a><br>
<a href="http://www.linesip.co.il/" target="_blank">http://www.linesip.co.il</a><br><br></div>