On Thu, 3 Aug 2023 08:38:53 +0000, Bonno Bloksma <b.blok...@tio.nl> wrote:

>> On 31.07.23 21:42, Jason Long via Openvpn-users wrote:
>>>> Hello,Is it possible to set public IP addresses from different
>>>> countries on one NIC?
>>>> VPN provider companies provide VPN service with IP addresses of
>>>> different countries. Do they have a separate server in that country?
>>>> Or have they just set IP addresses from different countries on the
>>>> same server?
>
>>> Maybe not really separate *servers*, but you may assume that *Internet 
>>> connections* (or "larger versions" of such) bought from providers in / 
>>> serving that country are involved.
>
>> Thank you so much for your reply.
>> So they can be just IP addresses from different countries that are set on a 
>> NIC.
>
>As long as the company hosting the VPN server has the right to use those
>IP numbers AND has a route to the uplink / ISP for that ip number..... 
>It is no different from any other ip number, be it 10.x.x.x and 172.16.x.x
>or 192.168.1.x or some public ip number, the routing has to be correct.

Please note for the TC that the IP addresses above are specifically set
aside to be *NON-rouable* addresses on the *Internet* only to be used internally
on LOCAL networks...
Such an address cannot be reached over the Internet! But it can be used fully on
the internal LAN and routed by the internal LAN routers. But NOT over Ineternet.

>The registrar for the ip number will not dictate what machine can use the
>ip number nor what other ip number can be on that machine.
>

There is *no* registrat for these *local only* address ranges! They are
completely free to use on local networks internal to homes and companies.
And this is why they ar set to be non-routable over the Internet. To be used
only internally.

VPN is specifically used to connect local LAN points across the Internet using a
VPN server's gateway *public* IP as entry point (via the port forward of the
gateway) and then the VPN server decides how to connect the client to an
internal LAN (using the internal LAN router system and IP addresses) or back out
again to the Internet via the local LAN's defined gateway.

In the latter case the packets reaching the final target will appear to come
from the public IP of the VPN server and VPN will administer the proper routing
needed to connect the endpoints (the VPN client and the final target).

There is *never* any need to manipulate the public facing NIC of the VPN
server's gateway to have several different IP addresses.
This would not even work because the only IP address that can be routed to from
the Internet is the one assigned by the Internet Service Provider to the device
connecting to the incoming fiber. And that ONLY if the ISP is not NAT-ing the
connections, in which case setting up a working OpenVPN server on a local
computer will not be possible at all...


-- 
Bo Berglund
Developer in Sweden



_______________________________________________
Openvpn-users mailing list
Openvpn-users@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to