On 2011-09-16 01:05:02 PM, Kevin Fenzi wrote:
To followup on myself and after an excellent suggestion from Seth...
Another way to do this is to just move vpn over to bastion02, don't
change dns or email. 'gateway' and 'bastion' stay pointed at bastion03.
This means a change to the vpn client.conf on all machines, but we can
push that out. It also means no DNS changes, which is good.
We can also change back by just changing which machine is running
openvpn server on it.
+1, but be careful with making sure that no VPN clients end
on the old one, as discussed on IRC.