Virtual IP is within in my LAN-Net !!??

LoCrux · Apr 25, 2018, 10:30 AM

could someone please explain me the meaning of the "Vitual IP"?

I've 2 running OpneVPN connections, where I can see a "remote ip" and a "virtual ip".
The function of the "remote ip" is clear (my public ip to the WAN).
But the need/use/function of the "virtual ip" is unclear to me.

As I've set up my LAN subnet with 10.0.0.0/8, so both "virtual ip's" are
within my LAN. Does this e.g. mean all my Samba-Shares could be seen by
my vpn provider????

SYSTEM -> ROUTING -> GATEWAYS:


   Name                 Interface   Gateway     Monitor IP  Description
1\. WAN_DHCP (default)   WAN         a.b.c.1     a.b.c.1     Interface WAN_DHCP Gateway     
2\. VPN_P2P_DHCP         VPN_P2P     10.8.8.X    10.8.8.X    Interface VPN_P2P_DHCP Gateway     
3\. VPN_UK_DHCP          VPN_UK      10.8.8.Y    10.8.8.Y    Interface VPN_UK_DHCP Gateway

I'd like to know if this could be a problem.
As all my clients are split up like this:


ROUTE_NO_VPN    : Hosts reside within 10.a.x.y/16  : all PC's 
ROUTE_NO_VPN_C  : Hosts reside within 10.a.y.z/16  : all PC's where children have access to (lot off stuff is blocked)
ROUTE_VPN_P2P   : Hosts reside within 10.b.x.y/16  : self explaining :) 
ROUTE_VPN_UK    : Hosts reside within 10.c.x.y/16  : Anroid Boxes to access BBC
ROUTE_PI        : Hosts reside within 10.d.x.y/16  : Home Automation (MQTT Broker, Sonoffs, Alexas)
ROUTE_GUEST     : Hosts reside within 10.e.x.y/16  : WiFi for Guests 
DENY_WAN        : Hosts reside within 10.f.x.y/16  : Things not alowed to phone outside

So i'd like to keep the /8 for the LAN (if possible).

Thanks for your help.

johnpoz · Apr 25, 2018, 12:53 PM

"So i'd like to keep the /8 for the LAN (if possible)."

For what possible reason would you need such a large mask… Do you have 1.6 million some hosts on this LAN?

A /8 makes zero sense on an interface - its only uses would be firewall rules and or summary routes, etc.

Use of such a network means that you will have nothing but issues with vpn clients that are coming from any network using 10.x.x.x address space...

Pick a realistic network size.. Love to help you work out whatever issue it is your having - but setting such a mask is just stupid, and made a new promise to myself not to deal with stupid ;)