Summary

In this chapter, we explored the capabilities of a tap-based setup as an alternative deployment model for OpenVPN. We discussed examples highlighting both features and disadvantages of such a setup. Special attention was given to bridged setups, as there are some common misconceptions about bridged mode, as found on OpenVPN Internet support forums.

We also saw that advanced management features, such as filtering traffic between OpenVPN clients, are much harder to achieve in tap mode compared to tun mode.

In the next chapter, we will see how we can use scripts and plugins to influence the way in which an OpenVPN server assigns an IP address to a client, as well as many other features. Scripts and plugins can be used in tap mode as well as tun mode.