Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN and Local network on the same C Class

    Scheduled Pinned Locked Moved OpenVPN
    2 Posts 2 Posters 2.3k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      Carlo
      last edited by

      Hi everybody,

      I'm currently using PPTP vpn server for our users to connect to our network. Because of the problems which are caused with users behind NAT i would like to switch to another VPN solution. I have run some tests with OpenVPN and they are looking good. Now I have one problem, that is I need those VPN clients in the same C class network as the rest of my LAN just like PPTP clients. I need this because we have an MPLS connecting us to other sites which only know our C class network. I see in this forum the optimal solution would be bridging which would allow just what i need but it seems not stable enough to use. What leaves are these 2 options (I think).

      1. Preform a NAT so that the IP's are masked (I really don't see how to set this up).
      2. Divide my Class C network up into smaller subnets so that my OVPN subnet is a different subnet but still in the C class.

      2 sounds like an option to me but I'm not sure if this will work. As example subnet's I would take:

      Server DMZ:    10.1.1.0/26
      OVPN:            10.1.1.64/27
      Spare subnet:  10.1.1.96/27
      LAN:              10.1.1.128/25

      Does this make sense?

      And if so how would i need to configure OVPN to access all these subnets?

      Any input appreciated!

      Carlo

      1 Reply Last reply Reply Quote 0
      • S
        Sharaz
        last edited by

        it will work fine, i run mine like this as well.

        192.168.125.0/25 LAN
        192.168.125.128/27 VPN

        as far as how to access the other non-LAN subnets, youll just need to tinker with it… but it doesnt sound unresonable.

        Jonathan

        1 Reply Last reply Reply Quote 0
        • First post
          Last post
        Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.