OpenVPN bridging with only one interface?

[Neil Joseph Schelly]

On Wednesday 08 February 2006 07:27 pm, Mark Komarinski wrote:
> (client) <-> (Internet) <-> (NAT box) <-> (OpenVPN server)
>
> Anyone doing this, or am I just missing the concepts here?

In this scenario, the client will run an OpenVPN client to get into the 
private network.  The OpenVPN server would be easiest to add to the NAT box - 
that's what I do for my own setup in fact.  The reason is that machines on 
the private network will need to be able to route to the machines through the 
OpenVPN connection, and you'll need to add static routes (assuming the NAT 
box is the default route gateway) for the VPN clients to the machines in the 
private network.  You'll also need to setup some form of routing on the 
OpenVPN box so that it will forward packets (again something the NAT box is 
already doing).
-N