Jail-OpenVpn logic

[mpericic]

Hi guys, i'm new with freeNAS and BSD generally but I've read a bit and i think freenas should be a match for my requirements.
I was wondering what is the logic with installing openvpn-client in jails, how am i supposed to access shares from vpn on ip other than freenas host?
Thanks in advance.

 

[garm]

By setting up a vpn client in a jail, that jail will have access to what ever is on the other side of the vpn. What I imagine you actually mean is setting up a vpn server in a jail to give remote users access to your FreeNAS? In that case the server will simply grant remote users access to your LAN and thus what ever resources are available on that network. It is non-trivial to open up any exposure past your LAN firewall, so thread very carefully..

 

[mpericic]

By setting up a vpn client in a jail, that jail will have access to what ever is on the other side of the vpn. What I imagine you actually mean is setting up a vpn server in a jail to give remote users access to your FreeNAS? In that case the server will simply grant remote users access to your LAN and thus what ever resources are available on that network. It is non-trivial to open up any exposure past your LAN firewall, so thread very carefully..

Thanks for your reply, what i mean is that i want freenas to connect to my vpn server where i have enabled client to client communication so i can access freenas from every client.

 

[garm]

FreeNAS and your vpn server are on different networks?

 

[mpericic]

FreeNAS and your vpn server are on different networks?

Openvpn server is in data center with fixed ip address and freenas is in my house so yeah.

 

[rvassar]

Openvpn server is in data center with fixed IP address and freenas is in my house so yeah.

I have a similar situation. I rigged up a script running out of cron to drop my IP address on a cloud server, which then updates a DNS A record so I can find my house.... At first I was seeing the IP address change every couple days, then every week or two... Now it hasn't changed in 2+ years.

 

[garm]

I have a similar situation. I rigged up a script running out of cron to drop my IP address on a cloud server, which then updates a DNS A record so I can find my house.... At first I was seeing the IP address change every couple days, then every week or two... Now it hasn't changed in 2+ years.

https://www.cloudflare.com/learning/dns/glossary/dynamic-dns/

 

[mpericic]

All i want is to run openvpn client directly from freenas, is that possible?

 

[rvassar]

https://www.cloudflare.com/learning/dns/glossary/dynamic-dns/

Where's the fun in using someone else's solution? ;)

 

[rvassar]

All i want is to run openvpn client directly from freenas, is that possible?

FreeNAS itself is configured as an appliance, and any config changes you make will get overwritten. You're better off putting it in a jail, and setting up a static route to the VPN address block via the jail. You will need to enable IPv4 routing.