Re: Network client is the same from server (solution)

2006-03-09 Thread Tiago Cruz
Some months after, I'm here back to say the solution: I did this in my default gateway master (192.168.0.0/22) with CARP (firewall fail over): Firewall Rules: == vpn2 = "tun0" ... set loginterface $vpn2 ... binat on $vpn2 from 192.168.0.0/22 to any -> 192.168.8.0/22 ... pass in on $v

Re: Network client is the same from server

2006-03-06 Thread Tiago Cruz
Hello all, I have some news about this subject: On Wed, 2006-02-01 at 13:46 +, Brian Candler wrote: > After: > >192.168.0.0/24 192.168.0.0/24 > --+-- GW1 GW2 -+--- > | [nat1] [nat2]

Re: Network client is the same from server

2006-02-01 Thread Julian Elischer
Brian Candler wrote: On Tue, Jan 31, 2006 at 12:42:36PM -0800, Julian Elischer wrote: And, If I have't not control about the second gateway? Because my client have a notebook, and he can try connect at anyplace, anytime :-( So, I think that is impossible to to... is true? no, you

Re: Network client is the same from server

2006-02-01 Thread Brian Candler
On Tue, Jan 31, 2006 at 12:42:36PM -0800, Julian Elischer wrote: > >And, If I have't not control about the second gateway? Because my client > >have a notebook, and he can try connect at anyplace, anytime :-( > > > >So, I think that is impossible to to... is true? > > > > > no, > you should be abl

Re: Network client is the same from server

2006-01-31 Thread Julian Elischer
Tiago Cruz wrote: On Tue, 2006-01-31 at 12:30 +, Brian Candler wrote: I think he needs to NAT destination addresses as well as source addresses, and statically map a whole /24 to another /24. Put diagramatically: Many thanks by your reply! and on GW2 you'd need And,

Re: Network client is the same from server

2006-01-31 Thread Tiago Cruz
On Tue, 2006-01-31 at 12:30 +, Brian Candler wrote: > I think he needs to NAT destination addresses as well as source addresses, > and statically map a whole /24 to another /24. Put diagramatically: Many thanks by your reply! > and on GW2 you'd need And, If I have't not control about the s

Re: Network client is the same from server

2006-01-31 Thread Brian Candler
On Mon, Jan 30, 2006 at 10:51:28AM -0800, Julian Elischer wrote: > Tiago Cruz wrote: > > >On Fri, 2006-01-27 at 13:19 -0800, Julian Elischer wrote: > > > > > > > >>it is definitly possible > >>but you will have to do some reading > >>natd can do it. > >> > >> > > it should be in the natd man

Re: Network client is the same from server

2006-01-30 Thread Julian Elischer
Tiago Cruz wrote: On Fri, 2006-01-27 at 13:19 -0800, Julian Elischer wrote: it is definitly possible but you will have to do some reading natd can do it. it should be in the natd man page.. (or libalias page) I found this in the OpenVPN FAQ: Does anybody know how

Re: Network client is the same from server

2006-01-30 Thread Tiago Cruz
On Fri, 2006-01-27 at 13:19 -0800, Julian Elischer wrote: > it is definitly possible > but you will have to do some reading > natd can do it. I found this in the OpenVPN FAQ: Does anybody know how to remap local addresses, if I want to connect two networks with an overlap in the

Re: Network client is the same from server

2006-01-27 Thread Tiago Cruz
On Fri, 2006-01-27 at 10:54 -0800, Julian Elischer wrote: > you can use NATD to fix this but you will need to have "mapped" name for > all teh machines on the other nets.. Wol, so is it possible?!?! I'm using FreeBSD 6.0 and OpenVPN 2.0.5-1. I'm not using ipfw, only PF. Is possible to do with p

Re: Network client is the same from server

2006-01-27 Thread Julian Elischer
Tiago Cruz wrote: Hi guys, Have some way, like some "ninjitsu" :) to make the connection that one client that have the same network that us? Exemple: My corporate network: 192.168.0.0/22 My house network: 192.168.0.0.24 Result: VPN don't work, because we have a address conflict. Thanks so mu