Arch Linux

bolero

Member

Registered: 2003-10-05

Posts: 60

openVPN broadcast across Bridge

Hey guys, So i have openVPN configured and working, my client can connect to it perfectly. However im trying to set this up so we can play games across the VPN that require broadcasts.

I'm using a BRIDGED set up, ill post my openVPN config below as well as my IPTABLE rules, but heres the thing. The computers on the physical lan, can see the openvpn clients broadcasts, however the clients cant see any of the physical lan computer broadcasts, so im at a complete lost.

Curious if anyone has successfully set this up. It's kinda annoying since its only half working for one side... I'm so close but im just not sure how to get my broadcasts to forward across the bridge to the openVPN clients
IPTABLES set like this.

-A INPUT -i tap0 -j ACCEPT
-A FORWARD -i tap0 -j ACCEPT
-A INPUT -i br0 -j ACCEPT
-A FORWARD -i br0 -j ACCEPT
-A FORWARD  -d 255.255.255.255 -j ACCEPT

openVPN config

local 192.168.1.4
port 1194
proto udp
dev tap0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key  # This file should be kept secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

#this will assign connecting clients address between the range of 20 and 25
server-bridge 192.168.1.1 255.255.255.0 192.168.1.20 192.168.1.25

#this will allow for people to get the same IP address after a reconnect
ifconfig-pool-persist /etc/openvpn/ipp.txt

push "route 192.168.1.0 255.255.255.0"

#change this to your companies DNS server or omit it entirely
#push "dhcp-option DNS 192.168.1.4"
keepalive 10 120
comp-lzo
max-clients 5
user nobody
group nobody
persist-key
persist-tun
status /tmp/openvpn-status.log
log-append  /var/log/openvpn.log
# Uncomment this directive to allow different
# clients to be able to "see" each other.
# By default, clients will only see the server.
# To force clients to only see the server, you
# will also need to appropriately firewall the
# server's TUN/TAP interface.
client-to-client

# Set the appropriate level of log
# file verbosity.
#
# 0 is silent, except for fatal errors
# 4 is reasonable for general usage
# 5 and 6 can help to debug connection problems
# 9 is extremely verbose
verb 4

fukawi2

Ex-Administratorino

From: .vic.au

Registered: 2007-09-28

Posts: 6,224

Website

Re: openVPN broadcast across Bridge

I can't help you, but this might be of assistance?
http://www.cjbuckley.net/blog/2006/10/1 … on-ubuntu/
They seem to be attempting the same goal, for a slightly different purpose though

---

Are you familiar with our Forum Rules, and How To Ask Questions The Smart Way?

BlueHackers // fscanary // resticctl