Bridging

Gonzo1982 · Post by **Gonzo1982** » Mon Apr 25, 2016 2:55 am

I'm wanting to setup a remote access vpn. I want to do the two nic local bridging technique. My question is which nics do I bridge? One nic will be in the DMZ zone, the other in the local lan zone? I've looked over the instructions several times but this hasn't been really covered. It will be installed on Windows 2012 R2.

maltyx · Post by **maltyx** » Mon Apr 25, 2016 12:37 pm

you should configure the internal NIC as bridge to any of your internal LAN

Gonzo1982 · Post by **Gonzo1982** » Mon Apr 25, 2016 12:54 pm

Ok, so I have DMZ Nic and Internal LAN Nic. That doesn't make sense to me to bridge internal nic with internal lan? To bridge don't I have to have to bridge two nics?

maltyx · Post by **maltyx** » Mon Apr 25, 2016 2:07 pm

what are going to do with your vpn server?
bridge means that you are going to connect your remote lan to the vpn server's LAN through a vpn connection by making a bridge between 2 networks ...

Gonzo1982 · Post by **Gonzo1982** » Mon Apr 25, 2016 2:12 pm

PC-to-LAN Remote Access VPN. I want my remote and traveling users to login to the public facing IP address associated with the DMZ Network Card and then get an IP address in the Local Lan and function just like they were here.

maltyx · Post by **maltyx** » Mon Apr 25, 2016 3:24 pm

so, you can follow this manual to setup your server:
http://www.softether.org/4-docs/2-howto ... VPN_to_LAN

create virtual hub as destination for remote users then bind it with physical nic (internal, connected to the net you want your remote users to connect to) and create some user accounts for this virtual hub.
after that, make DMZ's NIC accessible from the internet by specific vpn protocols you want to use .. and that's all.

that simple..

Gonzo1982 · Post by **Gonzo1982** » Tue Apr 26, 2016 12:11 am

So I was able to connect using openvpn to the network. Inside our LAN we have 3 subnets. I can only get to one of the LAN, the subnet that the physical nic is on. Is there an easy way to be able to connect to the other two subnets?

maltyx · Post by **maltyx** » Tue Apr 26, 2016 1:12 pm

I think it possible or by setting proper routing between those subnets (in case those 3 subnets are connected) .. or if those subnets are separated by just adding more NICs to your VPN server and creating 2 more virtual hubs on vpn server (physical or virtual/vlan if your network devices allow to do this: managed switches and vlan enabled NIC on server)

Bridging

Bridging

Re: Bridging

Re: Bridging

Re: Bridging

Re: Bridging

Re: Bridging

Re: Bridging

Re: Bridging