![background image](http://html.mh-extra.com/html/advantech/icr-1601/icr-1601_configuration-manual_3048042145.webp)
ICR-1601
145
OpenVPN TAP Scenario
The term "TAP" is referred to bridge mode and
operates with layer 2 packets. In bridge mode, the
VPN client is given an IP address on the same subnet
as the LAN resided under the OpenVPN server. Under
such configuration, the OpenVPN client can directly
access to the resources in LAN. If you want to offer
remote access to the entire remote LAN for VPN
client(s), you have to setup OpenVPN in “TAP” bridge
mode.
As shown in the diagram, the M2M-IoT Gateway is
configured as an OpenVPN TAP Client, and connects
to an OpenVPN TAP Server. Once the OpenVPN TAP
connection is established, the connected TAP client
will be assigned a virtual IP (192.168.100.210) which is
the same subnet as that of local subnet in Control
Center. With such connection, the SCADA Server in
Control Center can access remote attached serial
device(s)
with
the
virtual
IP
address
(192.168.100.210).