Eric Lawman | 2 Oct 2005 18:11
Picon

Re: Open VPN in FULL MESHED MODE

I just wanted to point out this is possible with some simple scripting.  On one server, I have a script that basically creates the config files for 30 other servers, then pushes them out and restarts openvpn.  I maintain a 30 tunnel full-mesh peer to peer vpn this way, and changes/additions are quite easy.

The only down side is I dynamically assign ports and ip addresses, so if i change one server, I have to change them all.  The script handles this, but it's inefficient.  While waiting for openvpn 3.0, I'll probably modify it to use a map file which keeps a record of which machines or subnets allocate which ports and ip addresses. 

I just wanted to mention this because people keep asking if it's possible, and it is.

Eric.


Gmane