mirror/openvpn
0
0
Fork 0
mirror of https://github.com/OpenVPN/openvpn.git synced 2024-09-19 19:42:30 +02:00
Code

Change default of "topology" to "subnet"

Browse Source 
Change-Id: Iede3e7c028cbb715e28bc88c7e583f84dadc02c8
Signed-off-by: Frank Lichtenheld <frank@lichtenheld.com>
Acked-by: Arne Schwabe <arne-openvpn@rfc2549.org>
Message-Id: <20231201112022.15337-1-frank@lichtenheld.com>
URL: https://www.mail-archive.com/openvpn-devel@lists.sourceforge.net/msg27627.html
Signed-off-by: Gert Doering <gert@greenie.muc.de>
This commit is contained in:
Frank Lichtenheld 2023-12-01 12:20:22 +01:00 committed by Gert Doering
parent e2ff9161e1
commit 32e6586687
3 changed files with 19 additions and 11 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
Changes.rst
View File

@ -23,6 +23,15 @@ NTLMv1 authentication support for HTTP proxies has been removed.
``persist-key`` option has been enabled by default.
All the keys will be kept in memory across restart.
Default for ``--topology`` changed to ``subnet``
Previous releases used ``net30`` as default. This only affects
configs with ``--dev tun`` and only IPv4. Note that this
changes the semantics of ``--ifconfig``, so if you have manual
settings for that in your config but not set ``--topology``
your config might fail to parse with the new version. Just adding
``--topology net30`` to the config should fix the problem.
By default ``--topology`` is pushed from server to client.
Overview of changes in 2.6
==========================

19
doc/man-sections/vpn-network-options.rst
View File

@ -495,11 +495,17 @@ routing.
``mode`` can be one of:
:code:`subnet`
Use a subnet rather than a point-to-point topology by
configuring the tun interface with a local IP address and subnet mask,
similar to the topology used in ``--dev tap`` and ethernet bridging
mode. This mode allocates a single IP address per connecting client and
works on Windows as well. This is the default.
:code:`net30`
Use a point-to-point topology, by allocating one /30 subnet
per client. This is designed to allow point-to-point semantics when some
or all of the connecting clients might be Windows systems. This is the
default.
or all of the connecting clients might be Windows systems.
:code:`p2p`
Use a point-to-point topology where the remote endpoint of
@ -508,15 +514,8 @@ routing.
connecting client. Only use when none of the connecting clients are
Windows systems.
:code:`subnet`
Use a subnet rather than a point-to-point topology by
configuring the tun interface with a local IP address and subnet mask,
similar to the topology used in ``--dev tap`` and ethernet bridging
mode. This mode allocates a single IP address per connecting client and
works on Windows as well.
*Note:* Using ``--topology subnet`` changes the interpretation of the
arguments of ``--ifconfig`` to mean "address netmask", no longer "local
arguments of ``--ifconfig`` to mean "address netmask", and not "local
remote".
--tun-mtu args

2
src/openvpn/options.c
View File

@ -796,7 +796,7 @@ init_options(struct options *o, const bool init_gc)
o->gc_owned = true;
}
o->mode = MODE_POINT_TO_POINT;
o->topology = TOP_NET30;
o->topology = TOP_SUBNET;
o->ce.proto = PROTO_UDP;
o->ce.af = AF_UNSPEC;
o->ce.bind_ipv6_only = false;