On Fri, Feb 27, 2015 at 6:38 AM, tefeng <tefeng.em at gmail.com> wrote: > Thanks for you answer. > I have been using OpenVPN in TUN mode or in TAP one before. I know TUN mode > is more secure than TAP one. But I wanna use tap mode in some places where > more convenience and less security are acceptable. > So I had thought ocserv may also support TAP mode. I revive this thread, because of a nice idea of Mauro Gaspari. The "TAP" mode can be simulated using proxy arp as in: https://github.com/openconnect/recipes/blob/master/ocserv-pseudo-bridge.md We would appreciate any comments or testing on that feature. regards, Nikos
