Hello,

Thanks in advance.

I use openvpn for IOT gateways, so I have a Raspberry Pi running Openvpn,
then an industrial automation networking running behind it. To get to these
devices I have DNAT rules running on the gateway to get to these devices.
This works fine until I have multiple PLCs that all use the same port for
communication and this port for communication between the manufacturer's
PLC software and the PLC cannot be changed.

At the moment I switch around the DNAT rules so that I can talk to one PLC
at a time, then when I want to talk to a different device I change the
rule. This is quite tedious, prone to error and makes diagnosing an
interaction problem between two devices on the remote network extremely
difficult.

Possible Solutions

   1. Is it possible for client configs to have/Server configs to push out
   multiple IP addresses to particular clients? This would be brilliant if
   this was an option, as I could just add IP for each device and add the NAT
   rules as required. I cannot find this feature in the
   documentation/Stackoverflow/Emails, which makes me think this is not an
   option at the moment. It would be nice to know if it would be practical to
   add this feature. I did C++ for 4 years when I came out of University, so I
   should be able to add this feature but I would need some assistance as I
   haven't contributed to the project yet and I wouldn't know where to start
   trying to add this.
   2. Could I have additional docker-contained clients on the client side
   to host additional IPs? I think this would work, I assume the performance
   wouldn't be terrible on a PI 4, although this does feel like a bit of
   unnecessary virtualisation and quite a bit of work to set up the docker
   containers.
   3. I know I could I have routes through to the IP pools of each gateway,
   however we have lots of gateways and the majority of local IP addresses for
   the devices connected to the Gateway are the same. This option feels like a
   configuration nightmare.
   4. Or some other way or method I have not thought about.

Thanks,

Alexander Franklin
_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to