PoE
AP
Router
209
OpenVPN
UN
Server.
Once
the
OpenVPN
TUN
connection
is
established,
the
connected
TUN
client
will
be
assigned
a
virtual
IP
(10.8.0.2)
which
is
belong
to
a
virtual
subnet
that
is
different
to
the
local
subnet
in
Control
Center.
With
such
connection,
the
local
networked
devices
will
get
a
virtual
IP
10.8.0.x
if
its
traffic
goes
through
the
OpenVPN
TUN
connection
when
Redirect
Internet
Traffic
settings
is
enabled;
Besides,
the
SCADA
Server
in
Control
Center
can
access
remote
attached
serial
device(s)
with
the
virtual
IP
address
(10.8.0.2).
OpenVPN
TAP
Scenario
The
term
"TAP"
is
referred
to
bridge
mode
and
operates
with
layer
2
packets.
In
bridge
mode,
the
VPN
client
is
given
an
IP
address
on
the
same
subnet
as
the
LAN
resided
under
the
OpenVPN
server.
Under
such
configuration,
the
OpenVPN
client
can
directly
access
to
the
resources
in
LAN.
If
you
want
to
offer
remote
access
to
the
entire
remote
LAN
for
VPN
client(s),
you
have
to
setup
OpenVPN
in
“TAP”
bridge
mode.
As
shown
in
the
diagram,
the
M2M
‐
IoT
Gateway
is
configured
as
an
OpenVPN
TAP
Client,
and
connects
to
an
OpenVPN
TAP
Server.
Once
the
OpenVPN
TAP
connection
is
established,
the
connected
TAP
client
will
be
assigned
a
virtual
IP
(192.168.100.210)
which
is
the
same
subnet
as
that
of
local
subnet
in
Control
Center.
With
such
connection,
the
SCADA
Server
in
Control
Center
can
access
remote
attached
serial
device(s)
with
the
virtual
IP
address
(192.168.100.210).
