OPENVPN PSK: Unterschied zwischen den Versionen
Zur Navigation springen
Zur Suche springen
| (4 dazwischenliegende Versionen desselben Benutzers werden nicht angezeigt) | |||
| Zeile 42: | Zeile 42: | ||
==Copy to hubsi== | ==Copy to hubsi== | ||
*scp static.key hubsi:$PWD | *scp static.key hubsi:$PWD | ||
| − | =Openvpn config on garlic | + | =Openvpn config on garlic= |
*vi /etc/openvpn/server.conf | *vi /etc/openvpn/server.conf | ||
<pre> | <pre> | ||
| − | + | remote 10.82.1.195 | |
dev tun | dev tun | ||
ifconfig 172.30.30.1 172.30.30.2 | ifconfig 172.30.30.1 172.30.30.2 | ||
| Zeile 53: | Zeile 53: | ||
</pre> | </pre> | ||
| − | =Openvpn config on hubsi | + | =Openvpn config on hubsi= |
*vi /etc/openvpn/client.conf | *vi /etc/openvpn/client.conf | ||
<pre> | <pre> | ||
| Zeile 61: | Zeile 61: | ||
secret static.key | secret static.key | ||
route 192.168.33.0 255.255.255.0 | route 192.168.33.0 255.255.255.0 | ||
| − | |||
keepalive 10 120 | keepalive 10 120 | ||
</pre> | </pre> | ||
Aktuelle Version vom 24. Oktober 2019, 11:03 Uhr
Layout
-192.168.33.1/24 -|garlic|-10.82.1.211---------------------10.82.1.195-|hubsi|-192.168.55.1/24
Interfaces
garlic
auto ens18 iface ens18 inet static address 10.82.1.211 netmask 255.255.0.0 gateway 10.82.0.1 auto dummy0 iface dummy0 inet static address 192.168.33.1 netmask 255.255.255.0 pre-up ip link add dummy0 type dummy
hubsi
auto ens18 iface ens18 inet static address 10.82.1.195 netmask 255.255.0.0 gateway 10.82.0.1 auto dummy0 iface dummy0 inet static address 192.168.55.1 netmask 255.255.255.0 pre-up ip link add dummy0 type dummy
Ipfordward on
- cat /etc/sysctl.conf
net.ipv4.ip_forward=1
- sysctl -p
Openvpn
Install
- sudo apt-get install openvpn
Generatre PSK on garlic
- cd /etc/openvpn/
- openvpn --genkey --secret static.key
Copy to hubsi
- scp static.key hubsi:$PWD
Openvpn config on garlic
- vi /etc/openvpn/server.conf
remote 10.82.1.195 dev tun ifconfig 172.30.30.1 172.30.30.2 secret static.key route 192.168.55.0 255.255.255.0 keepalive 10 120
Openvpn config on hubsi
- vi /etc/openvpn/client.conf
remote 10.82.1.211 dev tun ifconfig 172.30.30.2 172.30.30.1 secret static.key route 192.168.33.0 255.255.255.0 keepalive 10 120