OVPN lan to lan bridge: Unterschied zwischen den Versionen

Aus Xinux Wiki
Zur Navigation springen Zur Suche springen
(Der Seiteninhalt wurde durch einen anderen Text ersetzt: „*openvpn lan to lan Prinzip *openvpn lan to lan“)
Markierung: Ersetzt
Zeile 1: Zeile 1:
=Serversite=
+
*[[openvpn lan to lan Prinzip]]
==Bridging stuff==
+
*[[openvpn lan to lan]]
*openvpn --mktun --dev tap1
 
*brctl addbr vmbr1
 
*brctl addif vmbr1 eth1
 
*brctl addif vmbr1 tap1
 
*ifconfig eth1 0.0.0.0 promisc up
 
*ifconfig tap1 0.0.0.0 promisc up
 
*ifconfig vmbr1 192.168.56.1 netmask 255.255.255.0 up
 
==Openvpn stuff==
 
*/etc/openvpn/server.conf
 
<pre>
 
dev tap1
 
daemon
 
tls-server
 
proto udp
 
port 5555
 
ca /etc/openvpn/ca.crt
 
cert /etc/openvpn/kitan.xmen.de.crt
 
key /etc/openvpn/kitan.xmen.de.key
 
dh /etc/openvpn/dh4096.pem
 
mssfix
 
persist-key
 
persist-tun
 
log /var/log/openvpn
 
status /var/log/openvpn-status.log
 
verb 4
 
keepalive 10 120
 
mute 50
 
log-append /var/log/openvpn
 
compress lzo
 
verb 3
 
</pre>
 
=Clientsite=
 
==Bridging stuff==
 
*openvpn --mktun --dev tap1
 
*brctl addbr vmbr1
 
*brctl addif vmbr1 eth1
 
*brctl addif vmbr1 tap1
 
*ifconfig eth1 0.0.0.0 promisc up
 
*ifconfig tap1 0.0.0.0 promisc up
 
*ifconfig vmbr1 0.0.0.0  up
 
==Openvpn stuff==
 
*/etc/openvpn/client.conf
 
<pre>
 
port 5555
 
daemon
 
dev tap1
 
remote kitan.tuxmen.de
 
tls-client
 
ca /etc/openvpn/ca.crt
 
cert /etc/openvpn/worf.nux.lan.crt
 
key /etc/openvpn/worf.nux.lan.key
 
tun-mtu 1500
 
tun-mtu-extra 32
 
mssfix 1450
 
pull
 
comp-lzo
 
verb 3
 
</pre>
 

Version vom 23. Juli 2021, 13:34 Uhr