[prev in list] [next in list] [prev in thread] [next in thread] 

List:       netbsd-tech-net
Subject:    Re: Trying to set up a VPN from a dynamic address
From:       Tom Ivar Helbekkmo <tih () eunetnorge ! no>
Date:       2005-08-18 8:02:35
Message-ID: 86slx7r7tw.fsf () athene ! hamartun ! priv ! no
[Download RAW message or body]

Stephen Borrill <netbsd@precedence.co.uk> writes:

> N.B. I use [OpenVPN] in TCP client/server mode; the peer-to-peer UDP
> mode seems a bit useless to me if you've got dynamic addresses
> and/or firewalls/NAT in the way.

I've been using OpenVPN over UDP, with the client portable using
dynamic addresses behind NAT/PAT-ing firewalls, and it's no problem at
all, as OpenVPN sends and receives on the same port.  Just remember to
configure the keepalive functionality, to remind the firewall that the
mapping exists.

-tih
-- 
Don't ascribe to stupidity what can be adequately explained by ignorance.
[prev in list] [next in list] [prev in thread] [next in thread]