Some time ago when i configured OpenVPN i had to set my bridge (bridge1) arp to proxy arp in order to have access to all my devices when i connect via VPN. Recently i have connected to my LAN the SolarEdge Inverter and noticed that even if i set static IP a get allot entrys in arp table (ip ragnes 169.245.xxx.xxx).
If i set arp in my bridge to Enable than i can’t access my devices but arp table stays clean.. i have tried to create a new bridge(bridgeVPN), set proxy-arp and bind it to my VPN setting.
So i have:
My main bridge set to: 192.168.1.0/24
my vpn bridge: 10.3.100.0/24
My question. what way is best to link vpn bridge to my main/route or how to configure to get back full access to my devices on LAN without changing arp to proxy-arp in bridge?
Unless you have good reasons not to, you can dedicate a separate IP subnet to OpenVPN … traffic will be routed (instead of bridged), so no need for proxy arp. Some device firewalls may get triggered though …
I don’t mind if i have seperate IP subnet for Open VPN. as i wrote in post. the 10.3.100.0/24 subnet is ment to be for VPN and 192.168.1.0/24 is my min.
my question was what is the right way to bridge or route these two subnets.
Set one of 10.3.100.x/24 addresses to OVPN interface … and let router do routing. You may have to adjust firewall filter rules, default allows almost all communication except for WAN to elsewhere. Depending on needs you either have to add some firewall rules which will deal with OVPN traffic explicitly … if you feel comfortable with that you can even add OVPN interface to LAN interface list.
Client config should then include routing information to both OVPN address and LAN subnet.
Ah, yes, use OVPN interface as stand alone interface, don’t add it to bridge. If there will be multiple OVPN interfaces (for multiple clients) and you want them in same IP subnet, then create a dedicated bridge, add all OVPN interfaces to that bridge and set OVPN IP address to that bridge. The rest is the same (let ROS route between both subnets).
By OVPN Interface do you mean the username that is defined in secrets or where is it defined, because when i search for it i can’t find any OVPNInterface?
i gave created another bridge because i defined address subnet 10.3.100.1/24 in IP-Addresses. But i thnik i don’t need to have this defined in order to define another subnet for Ovpn? Just add local and remote IP in ppp-secrets?
p.s. Sory for such stupid questions.. i’m somewhat new to networking.
I don’t have practical experience with OVPN … so far I’m using other encrypted point-to-point tunnels (IPIP, …) so I can’t give you any more practical suggestions. Hopefully somebody else with OVPN experience will pass by and help you further.
