LFCS · Question #365
In which of the following scenarios MUST an administrator use ethernet bridging instead of routing when configuring an OpenVPN site? (Select TWO correct answers)
The correct answer is B. NetBIOS traffic must be able to traverse the VPN without implementing a WINS server. E. The IPX protocol is required. Ethernet bridging (TAP mode) in OpenVPN is essential when the VPN needs to transport non-IP protocols or protocols heavily reliant on Layer 2 broadcasts.
Question
Options
- ASome OpenVPN clients will be installed on laptops and must be able to connect from different locations.
- BNetBIOS traffic must be able to traverse the VPN without implementing a WINS server.
- CThe IPv4 protocol is required.
- DIt will be necessary to use an MTU setting other than the default.
- EThe IPX protocol is required.
How the community answered
(52 responses)- A4% (2)
- B69% (36)
- C10% (5)
- D17% (9)
Why each option
Ethernet bridging (TAP mode) in OpenVPN is essential when the VPN needs to transport non-IP protocols or protocols heavily reliant on Layer 2 broadcasts.
Both routed and bridged OpenVPN configurations can support clients connecting from various locations; this is not exclusive to bridging.
NetBIOS relies on Layer 2 broadcasts for name resolution and browsing, which are not forwarded by default in a routed (TUN) VPN; a bridged (TAP) VPN is required to pass these broadcasts without a WINS server.
Both routed and bridged OpenVPN modes fully support the IPv4 protocol.
The MTU setting can be adjusted in both routed and bridged OpenVPN configurations as needed, making it unrelated to the choice between bridging and routing for these specific protocols.
The IPX protocol is a non-IP protocol that requires Layer 2 encapsulation provided by a bridged (TAP) OpenVPN connection to function correctly across the VPN tunnel, as TUN devices are designed for IP packets.
Concept tested: OpenVPN bridging vs. routing scenarios
Source: https://openvpn.net/community-resources/ethernet-bridging/
Topics
Community Discussion
No community discussion yet for this question.