Enabling client-to-client traffic

This recipe is a continuation of the previous recipe. It will demonstrate how to set up a TAP-based connection in client or server mode using certificates. Using the client-to-client directive, it will also enable different OpenVPN clients to contact each other. For TAP-based networks, this leads to some important side effects.

Getting ready

We use the following network layout:

Set up the client and server certificates using the first recipe from Chapter 2, Client-server IP-only Networks.

For this recipe, the server was running CentOS 6 Linux and OpenVPN 2.3.10; both clients were running Windows 7 64 bit and OpenVPN 2.3.10. For the server, keep the configuration file example3-1-server.conf from the previous recipe at hand.

How to do it...

1. Create the server configuration file by adding a line to the example3-1-server.conf file:

       client-to-client
   

   Save it as example-3-2-server.conf.

2. Start the server:

         [root@server]# openvpn --config example3-2-server.conf...