Changes between Version 7 and Version 8 of Concepts-Addressing

Timestamp:

06/04/14 22:18:57 (10 years ago)

Author:

JoshC

Comment:

--

Concepts-Addressing

@@ -158 +158 @@
 --pkcs12 /vpn/client.p12
 }}}
+
+
+=== Examples for p2p topology ===
+
+This topology is only valid when none of your clients are Windows. The benefit is that you can use the entire network range. This can be beneficial when using smaller networks, such as a /29, /30, or even a /31 (normally unusable on "traditional" Ethernet-style networks.)
+
+An advanced example is also shown at the end where you can use 100% of a given network for client IPs since PtP addressing does not have to be contiguous.
+
+All these examples push the assigned IPs from the server, so they use a '''single''' client config common to all examples:
+
+==== Common client config for p2p examples ====
+
+* client config:
+{{{
+--client
+--dev tun
+
+# TLS needs:
+--pkcs12 /vpn/client.p12
+}}}
+
+==== Using a /24 ====
+
+In this example, we assign the following addressing:
+* VPN server: 10.8.0.0
+* client1: 10.8.0.1
+* client2: 10.8.0.2
+* dynamic IPs assigned to other clients: 10.8.0.100 - 10.8.0.199
+* (The IP 10.8.0.255 is used as a common peering IP and not routable)
+
+* server config:
+{{{
+--mode server
+--tls-server
+--dev tun
+--topology "p2p"
+--push "topology p2p"
+--ifconfig 10.8.0.0 10.8.0.255
+--push "route-gateway 10.8.0.0"
+--ifconfig-pool 10.8.0.100 10.8.0.199
+--client-config-dir /vpn/ccd-dir
+
+# TLS needs:
+--pkcs12 /vpn/server.p12
+--dh /vpn/dh.pem
+}}}
+* server's `/vpn/ccd-dir/client1` file:
+{{{
+ifconfig-push 10.8.0.1 10.8.0.0
+}}}
+* server's `/vpn/ccd-dir/client2` file:
+{{{
+ifconfig-push 10.8.0.2 10.8.0.0
+}}}
+
+==== Advanced example: utilizing a /30 ====
+
+In this example, we assign the following addressing, assigning 4 clients out of the network 203.0.113.252/30. The VPN server uses RFC1918 locally, and a matching RFC1918 is used by clients as the peering address.
+* VPN server: 192.168.222.0 (peering with 192.168.222.1)
+* client1: 203.0.113.252
+* client2: 203.0.113.253
+* client3: 203.0.113.254
+* client4: 203.0.113.255
+
+* server config:
+{{{
+--mode server
+--tls-server
+--dev tun
+--topology "p2p"
+--push "topology p2p"
+--ifconfig 192.168.222.0 192.168.222.1
+--push "route-gateway 192.168.222.0"
+--client-config-dir /vpn/ccd-dir
+
+# TLS needs:
+--pkcs12 /vpn/server.p12
+--dh /vpn/dh.pem
+}}}
+* server's `/vpn/ccd-dir/client1` file:
+{{{
+ifconfig-push 203.0.113.252 192.168.222.0
+}}}
+* server's `/vpn/ccd-dir/client2` file:
+{{{
+ifconfig-push 203.0.113.253 192.168.222.0
+}}}
+* server's `/vpn/ccd-dir/client3` file:
+{{{
+ifconfig-push 203.0.113.254 192.168.222.0
+}}}
+* server's `/vpn/ccd-dir/client4` file:
+{{{
+ifconfig-push 203.0.113.255 192.168.222.0
+}}}