Re: [gentoo-user] VPN vs LAN address hostname resolution

[Michael Mol <mikemol@gmail.com>]

[-- Attachment #1: Type: text/plain, Size: 1247 bytes --]

On 05/22/2013 01:36 PM, Michael Orlitzky wrote:
> On 05/22/13 12:36, Samuraiii wrote:
>> Hello,
>>
>> I am trying to get hostname address resolution on my LAN and VPN with
>> one serious problem:
>> I have two "networks" eg. 10.1.1.0 and 10.2.2.0 which are representing
>> local address space for LAN (10.1.1.0/8) and VPN address space (10.2.2.0/8).
> This isn't two networks, it's one network and you've got the VPN space
> overlapping the LAN space. To oversimplify a little, Don't Do That.
>
> Use a separate subnet for the VPN. Then traffic to the VPN will be
> routed over the VPN interface as intended, but traffic to the LAN will
> be routed over the LAN interface. This is what you want, but right now
> the VPN and the LAN are the same network, so "routing to the LAN" is the
> same as "routing to the VPN", and your network stack doesn't know what
> to do with it.
>
>

To be clear, replacing /8 with /24 would do this:

10.1.1.0/8, as a "network", is really just 10.0.0.0/8. This is also true
of 10.2.2.0/8. The bits after the first 8 are irrelevant, since a /8 is
being used. Use /24 instead, in this case.

It would be good for Samuraiii to read up:

http://www.tcpipguide.com/free/t_IPAddressing.htm



[-- Attachment #2: OpenPGP digital signature --]
[-- Type: application/pgp-signature, Size: 555 bytes --]