RE: IP Tunneling

Linux Advanced Routing and Traffic Control

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Hello
If I understand OpenVPN's "routed" mode correct, I can't use the tunnel to
browse the net, use irc or run an e-mail server. I set up a routed tunnel
a few days ago, and all I got was a tunnel between the two computers with
local addresses (10.0.0.0-style).

But I maybe have wrong?

> Hi Jonathan,
>
> I am wondering, why do you exclude OpenVPN from the list of appropriate
> solutions for your needs?
> As far as I know, you do not have to use it in the "bridging mode" it can
> work also as normal routing via tunnels.
> Furthermore you can also use it without security.
>
> For the tunnels you OpenVPN uses the tun/tap devices ....
> I think you can also use these without OpenVPN ... but here I am not sure,
> see man pages and google ....
>
> And this might also be a good link regarding this topic:
> http://vtun.sourceforge.net/
> They allow you to use also UDP as tunnel protocol, less overhead, and
> suitable for NAT traversal :O)
>
>
> Hopefully this helps you a little bit,
>
> Marc
>
>
>
>> -----Original Message-----
>> From: lartc-bounces@xxxxxxxxxxxxxxx
>> [mailto:lartc-bounces@xxxxxxxxxxxxxxx]On Behalf Of
>> phonic@xxxxxxxxxxxxx
>> Sent: Wednesday, April 27, 2005 9:38 AM
>> To: Taylor, Grant
>> Cc: lartc@xxxxxxxxxxxxxxx
>> Subject: Re:  IP Tunneling
>>
>>
>> > phonic@xxxxxxxxxxxxx wrote:
>> >> Hello
>> >> I have /25 addressed on a box (virtual devices on eth0)
>> and I want to
>> >> tunnel some of these addresses to my home network. One
>> address to my
>> >> gateway (a.b.c.d, external IP) and one address to my
>> internal network
>> >> (192.168.0.0/24-style). I will use the tunnels for irc, smtp and
>> >> surfing.
>> >> What protocol and which technique is easiest and best to use?
>> >>
>> >> One more thing. I don't want to set up a bridge on eth0 at
>> the /25-box
>> >> (like the OpenVPN-howto wants me to do). The configuration
>> on that box
>> >> have to be intact if it's possible, apart from the addresses I will
>> >> tunnel.
>> >
>> > Have you considered trying to get SSH to tunnel things for
>> you?  I don't
>> > know if this will meet your needs or not.  If not you are looking at
>> > something like a GRE tunnel, IP-IP tunnel, PPTP tunnel, or
>> IPSec tunnel.
>> > Save for SSH, all of these options are rather involved and
>> complex to set
>> > up.
>> >
>> >
>> >
>> > Grant. . . .
>> >
>>
>> Hello
>> I have looked at SSH tunneling, but what I know I think that's not the
>> best solution for me. After some research, IPIP or GRE tunnel
>> seems to fit
>> me best. But I don't find any good documentation, neither the
>> LARTC howto
>> is brings up my problem.
>>
>> I'd figured out that I will use iptunnel or similar to set up an
>> IPIP-tunnel, like:
>>
>> iptunnel add dev tunl1 mode ipip local a.b.c.d remote e.f.g.h
>>
>> and the same on the other side (just switching local and
>> remote addresses)
>> to tunnel the public IP address e.f.g.h (on the /25-box) to tunl0 at
>> a.b.c.d (my public IP at home). But the connection betweeen me and the
>> remote host freezes, so I guess that's not enough. What more
>> do I have to
>> do?
>>
>> Regards
>> Jonathan
>>
>> _______________________________________________
>> LARTC mailing list
>> LARTC@xxxxxxxxxxxxxxx
>> http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc
>>

_______________________________________________
LARTC mailing list
LARTC@xxxxxxxxxxxxxxx
http://mailman.ds9a.nl/cgi-bin/mailman/listinfo/lartc

[Index of Archives]     [LARTC Home Page]     [Netfilter]     [Netfilter Development]     [Network Development]     [Bugtraq]     [GCC Help]     [Yosemite News]     [Linux Kernel]     [Fedora Users]
  Powered by Linux