Talk:OpenVPN - Site-to-Site Bridged VPN Between Two Routers - Revision history http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&action=history Revision history for this page on the wiki en MediaWiki 1.10.1 Thu, 28 Mar 2024 14:45:53 GMT Cambonicky: /* Wireless Clients get the IP assigned by the server router */ http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=27669&oldid=prev <p><span class="autocomment">Wireless Clients get the IP assigned by the server router</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:42, 26 October 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 15:</strong></td> <td colspan="2" align="left"><strong>Line 15:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">== Wireless Clients get the IP assigned by the server router ==</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"><ins style="color: red; font-weight: bold; text-decoration: none;">Solution:</ins></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">&#160;</td><td>+</td><td style="background: #cfc; font-size: smaller;">I <ins style="color: red; font-weight: bold; text-decoration: none;">got </ins>the <ins style="color: red; font-weight: bold; text-decoration: none;">same problem, but after I assign </ins>Server to 192.168.<ins style="color: red; font-weight: bold; text-decoration: none;">1</ins>.<ins style="color: red; font-weight: bold; text-decoration: none;">1 </ins>and <ins style="color: red; font-weight: bold; text-decoration: none;">client to </ins>192.168.1.2 <ins style="color: red; font-weight: bold; text-decoration: none;"> </ins>everything <ins style="color: red; font-weight: bold; text-decoration: none;">work </ins>fine <ins style="color: red; font-weight: bold; text-decoration: none;">for </ins>me. I <ins style="color: red; font-weight: bold; text-decoration: none;">could ping both PC behind both Routers</ins>.</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">I <del style="color: red; font-weight: bold; text-decoration: none;">followed </del>the <del style="color: red; font-weight: bold; text-decoration: none;">guide and it worked like a charm. My setup:</del></td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Server<del style="color: red; font-weight: bold; text-decoration: none;">: Asus Wl-520gu with IP address range 192.168.10.100 </del>to 192.168.<del style="color: red; font-weight: bold; text-decoration: none;">10</del>.<del style="color: red; font-weight: bold; text-decoration: none;">150 </del>and <del style="color: red; font-weight: bold; text-decoration: none;">router IP:</del>192.168<del style="color: red; font-weight: bold; text-decoration: none;">.10</del>.1</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Client: WRT54G V2 with IP address range 192.168.10.151 to 192.168.10.200 and router IP:192.168.10</del>.2</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"><del style="color: red; font-weight: bold; text-decoration: none;">Now </del>everything <del style="color: red; font-weight: bold; text-decoration: none;">works </del>fine <del style="color: red; font-weight: bold; text-decoration: none;">from the clients but there is a small problem. When a client is connected through one of the ethernet ports of the client router then the IP and gateway of the client is fine but when a wireless user connects then strangely the IP address is given from the server routher's IP range and also the gateway is set to the Server router's IP address. Could someone please help </del>me <del style="color: red; font-weight: bold; text-decoration: none;">resolve this</del>. <del style="color: red; font-weight: bold; text-decoration: none;">Oh by the way </del>I <del style="color: red; font-weight: bold; text-decoration: none;">did not have any trouble connecting to the internet even with this setup. But I was wondering what if the server router is down then how will the wireless clients will be affected under this scenario</del>.</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== OpenVPN is running at both ends, but I still can't connect ==</td><td> </td><td style="background: #eee; font-size: smaller;">== OpenVPN is running at both ends, but I still can't connect ==</td></tr> </table> Mon, 26 Oct 2009 19:42:52 GMT Cambonicky http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers DertyWerk: /* Server hosts can't ping client hosts */ http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=27540&oldid=prev <p><span class="autocomment">Server hosts can't ping client hosts</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 23:49, 16 October 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 38:</strong></td> <td colspan="2" align="left"><strong>Line 38:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">== Server hosts can't ping client hosts ==</td><td> </td><td style="background: #eee; font-size: smaller;">== Server hosts can't ping client hosts ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">The only issue I am currently having is that hosts on the client network can ping hosts on the server network, but not the other way around. A host on the server network can ping the router on the client side though. I <del style="color: red; font-weight: bold; text-decoration: none;">did make sure to turn off </del>icmp filtering on both routers. Any ideas?</td><td>+</td><td style="background: #cfc; font-size: smaller;">The only issue I am currently having is that hosts on the client network can ping hosts on the server network, but not the other way around. A host on the server network can ping the router on the client side though. I <ins style="color: red; font-weight: bold; text-decoration: none;">have </ins>icmp filtering on both routers <ins style="color: red; font-weight: bold; text-decoration: none;">turned off</ins>. Any ideas?</td></tr> </table> Fri, 16 Oct 2009 23:49:56 GMT DertyWerk http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers DertyWerk: /* Any other tips to debug? */ http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=27539&oldid=prev <p><span class="autocomment">Any other tips to debug?</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 23:48, 16 October 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 35:</strong></td> <td colspan="2" align="left"><strong>Line 35:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* Check the time (on the upper right corner) of the routers. Both routers have to be approximately at the same time. An easy way to synchronize the two routers is to use NTP (on Setup page). Be sure to use the same time zone and daylight savings time settings. </td><td> </td><td style="background: #eee; font-size: smaller;">* Check the time (on the upper right corner) of the routers. Both routers have to be approximately at the same time. An easy way to synchronize the two routers is to use NTP (on Setup page). Be sure to use the same time zone and daylight savings time settings. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* When all else fails, post to the dd-wrt forums!</td><td> </td><td style="background: #eee; font-size: smaller;">* When all else fails, post to the dd-wrt forums!</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Server hosts can't ping client hosts ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The only issue I am currently having is that hosts on the client network can ping hosts on the server network, but not the other way around. A host on the server network can ping the router on the client side though. I did make sure to turn off icmp filtering on both routers. Any ideas?</td><td> </td><td style="background: #eee; font-size: smaller;">The only issue I am currently having is that hosts on the client network can ping hosts on the server network, but not the other way around. A host on the server network can ping the router on the client side though. I did make sure to turn off icmp filtering on both routers. Any ideas?</td></tr> </table> Fri, 16 Oct 2009 23:48:28 GMT DertyWerk http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers DertyWerk at 23:47, 16 October 2009 http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=27538&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 23:47, 16 October 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 35:</strong></td> <td colspan="2" align="left"><strong>Line 35:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* Check the time (on the upper right corner) of the routers. Both routers have to be approximately at the same time. An easy way to synchronize the two routers is to use NTP (on Setup page). Be sure to use the same time zone and daylight savings time settings. </td><td> </td><td style="background: #eee; font-size: smaller;">* Check the time (on the upper right corner) of the routers. Both routers have to be approximately at the same time. An easy way to synchronize the two routers is to use NTP (on Setup page). Be sure to use the same time zone and daylight savings time settings. </td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">* When all else fails, post to the dd-wrt forums!</td><td> </td><td style="background: #eee; font-size: smaller;">* When all else fails, post to the dd-wrt forums!</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">The only issue I am currently having is that hosts on the client network can ping hosts on the server network, but not the other way around. A host on the server network can ping the router on the client side though. I did make sure to turn off icmp filtering on both routers. Any ideas?</td></tr> </table> Fri, 16 Oct 2009 23:47:31 GMT DertyWerk http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Xnok at 04:35, 22 May 2009 http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=25377&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 04:35, 22 May 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 21:</strong></td> <td colspan="2" align="left"><strong>Line 21:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Client: WRT54G V2 with IP address range 192.168.10.151 to 192.168.10.200 and router IP:192.168.10.2</td><td> </td><td style="background: #eee; font-size: smaller;">Client: WRT54G V2 with IP address range 192.168.10.151 to 192.168.10.200 and router IP:192.168.10.2</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Now everything works fine from the clients but there is a small problem. When a client is connected through one of the ethernet ports of the client router then the IP and gateway of the client is fine but when a wireless user connects then strangely the IP address is given from the server routher's IP range and also the gateway is set to the Server router's IP address. Could someone please help me resolve this. Oh by the way I did not have any trouble connecting to the internet even with this setup. But I was wondering what if the server router is down then how will the wireless clients will be affected under this scenario.</td><td> </td><td style="background: #eee; font-size: smaller;">Now everything works fine from the clients but there is a small problem. When a client is connected through one of the ethernet ports of the client router then the IP and gateway of the client is fine but when a wireless user connects then strangely the IP address is given from the server routher's IP range and also the gateway is set to the Server router's IP address. Could someone please help me resolve this. Oh by the way I did not have any trouble connecting to the internet even with this setup. But I was wondering what if the server router is down then how will the wireless clients will be affected under this scenario.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== OpenVPN is running at both ends, but I still can't connect ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Make sure you have the &quot;remote x.y.z&quot; in your server config. If you have a dynamic IP, use a dynamic DNS service like dyndns.org to give your machines names. Finally, make sure on the DDNS setup page that both routers have successfully upated the DDNS database. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Any other tips to debug? ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Enable SSH on the routers and login. cd to /tmp and look at the config files and dns resolution files. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* If you still can't find the problem, try running openvpn directly with the config file on the router interactively (remove the &quot;daemon&quot; directive). You may also want to increase the verbosity level to 5 or 8. I find this easier than trying to use the syslog.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Try running openvpn with each one of the directives in the config file separately. This will catch any misspellings.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Make sure your DNS entries are upto date.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Make sure that port 1194 is open (or what ever port you picked)</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* Check the time (on the upper right corner) of the routers. Both routers have to be approximately at the same time. An easy way to synchronize the two routers is to use NTP (on Setup page). Be sure to use the same time zone and daylight savings time settings. </td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">* When all else fails, post to the dd-wrt forums!</td></tr> </table> Fri, 22 May 2009 04:35:27 GMT Xnok http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Samuraijack at 03:49, 15 April 2009 http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=25205&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 03:49, 15 April 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 14:</strong></td> <td colspan="2" align="left"><strong>Line 14:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Wireless Clients get the IP assigned by the server router ==</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">I followed the guide and it worked like a charm. My setup:</td><td> </td><td style="background: #eee; font-size: smaller;">I followed the guide and it worked like a charm. My setup:</td></tr> </table> Wed, 15 Apr 2009 03:49:37 GMT Samuraijack http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Samuraijack at 03:47, 15 April 2009 http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=25204&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 03:47, 15 April 2009</td> </tr> <tr><td colspan="2" align="left"><strong>Line 14:</strong></td> <td colspan="2" align="left"><strong>Line 14:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;"></td><td> </td><td style="background: #eee; font-size: smaller;"></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td><td> </td><td style="background: #eee; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">I followed the guide and it worked like a charm. My setup:</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Server: Asus Wl-520gu with IP address range 192.168.10.100 to 192.168.10.150 and router IP:192.168.10.1</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Client: WRT54G V2 with IP address range 192.168.10.151 to 192.168.10.200 and router IP:192.168.10.2</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Now everything works fine from the clients but there is a small problem. When a client is connected through one of the ethernet ports of the client router then the IP and gateway of the client is fine but when a wireless user connects then strangely the IP address is given from the server routher's IP range and also the gateway is set to the Server router's IP address. Could someone please help me resolve this. Oh by the way I did not have any trouble connecting to the internet even with this setup. But I was wondering what if the server router is down then how will the wireless clients will be affected under this scenario.</td></tr> </table> Wed, 15 Apr 2009 03:47:23 GMT Samuraijack http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Valnar: Frame sizes? http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=22741&oldid=prev <p>Frame sizes?</p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:15, 28 October 2008</td> </tr> <tr><td colspan="2" align="left"><strong>Line 8:</strong></td> <td colspan="2" align="left"><strong>Line 8:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">== Frame sizes? ==</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">I've used L2TPv3 on Cisco before and always ran into the same problem - it didn't support frame sizes around 1500. Since L3 packet + VPN overhead usually pushes it over the MTU threshold for the Internet, I need some way to fragment packets (errr...frames) either after or before it's bridged through the tunnel.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td></tr> </table> Tue, 28 Oct 2008 19:15:36 GMT Valnar http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Valnar: /* Solution */ http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=22740&oldid=prev <p><span class="autocomment">Solution</span></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:15, 28 October 2008</td> </tr> <tr><td colspan="2" align="left"><strong>Line 8:</strong></td> <td colspan="2" align="left"><strong>Line 8:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">I've used L2TPv3 on Cisco before and always ran into the same problem - it didn't support frame sizes around 1500. Since L3 packet + VPN overhead usually pushes it over the MTU threshold for the Internet, I need some way to fragment packets (errr...frames) either after or before it's bridged through the tunnel.</td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;"></td><td colspan="2">&nbsp;</td></tr> <tr><td>-</td><td style="background: #ffa; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td><td colspan="2">&nbsp;</td></tr> </table> Tue, 28 Oct 2008 19:15:21 GMT Valnar http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers Valnar at 19:14, 28 October 2008 http://wiki.dd-wrt.com/wiki/index.php?title=Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers&diff=22739&oldid=prev <p></p> <table border='0' width='98%' cellpadding='0' cellspacing='4' style="background-color: white;"> <tr> <td colspan='2' width='50%' align='center' style="background-color: white;">←Older revision</td> <td colspan='2' width='50%' align='center' style="background-color: white;">Revision as of 19:14, 28 October 2008</td> </tr> <tr><td colspan="2" align="left"><strong>Line 8:</strong></td> <td colspan="2" align="left"><strong>Line 8:</strong></td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td><td> </td><td style="background: #eee; font-size: smaller;">=== Solution ===</td></tr> <tr><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td><td> </td><td style="background: #eee; font-size: smaller;">The two routers have to be in the same sub-domain for the bridging to work, make both of them in the 11.x subdomain or the 1.x subdomain. Then make sure that the DHCP servers on each end issue IP addresses that do not overlap with those on the other end. (Added by xnok)</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">I've used L2TPv3 on Cisco before and always ran into the same problem - it didn't support frame sizes around 1500. Since L3 packet + VPN overhead usually pushes it over the MTU threshold for the Internet, I need some way to fragment packets (errr...frames) either after or before it's bridged through the tunnel.</td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;"></td></tr> <tr><td colspan="2">&nbsp;</td><td>+</td><td style="background: #cfc; font-size: smaller;">Does this method support that? If not, can it be tweaked further?</td></tr> </table> Tue, 28 Oct 2008 19:14:54 GMT Valnar http://wiki.dd-wrt.com/wiki/index.php/Talk:OpenVPN_-_Site-to-Site_Bridged_VPN_Between_Two_Routers