Openvpn lan to lan

Server Seite

Script

#!/bin/bash
BR=vmbr0
INT=ens30
TAP=tap1
IP="10.86.0.1 netmask 255.255.0.0"
case $1 in
start)
openvpn --mktun --dev $TAP
brctl addbr $BR
brctl addif $BR $INT
brctl addif $BR $TAP
ifconfig $INT 0.0.0.0 promisc up
ifconfig $TAP 0.0.0.0 promisc up
ifconfig $BR $IP up
;;
stop)
ifconfig $BR $IP down
ifconfig $TAP 0.0.0.0 promisc down
ifconfig $INT 0.0.0.0 promisc down
brctl delif $BR $TAP
brctl delif $BR $INT
brctl delbr $BR
openvpn --rmtun --dev $TAP
;;
esac

Openvpn

• openssl dhparam -out dh4096.pem 4096
• cat lan-bridge.conf

dev tap1
daemon
cipher AES-256-CBC
tls-server
proto udp
port 5555
ca /etc/openvpn/ca.crt
cert /etc/openvpn/bortus.tuxmen.de.crt
key /etc/openvpn/bortus.tuxmen.de.key
dh /etc/openvpn/dh4096.pem
mssfix
persist-key
persist-tun
log /var/log/openvpn
status /var/log/openvpn-status.log
verb 4
keepalive 10 120
mute 50
log-append /var/log/openvpn
compress lzo
verb 3

Client

Script

#!/bin/bash
BR=vmbr4
INT=dummy1
TAP=tap1
IP="10.86.0.2 netmask 255.255.0.0"
case $1 in
start)
openvpn --mktun --dev $TAP
brctl addbr $BR
brctl addif $BR $INT
brctl addif $BR $TAP
ifconfig $INT 0.0.0.0 promisc up
ifconfig $TAP 0.0.0.0 promisc up
ifconfig $BR $IP up
;;
stop)
ifconfig $BR $IP down
ifconfig $TAP 0.0.0.0 promisc down
ifconfig $INT 0.0.0.0 promisc down
brctl delif $BR $TAP
brctl delif $BR $INT
brctl delbr $BR
openvpn --rmtun --dev $TAP
;;
esac

Openvpn

• cd /etc/openvpn
• cat lan-bridge.conf

cat lan-bridge.conf 
port 5555 
daemon
cipher AES-256-CBC
dev tap1
remote bortus.tuxmen.de
tls-client
ca /etc/openvpn/ca.crt
cert /etc/openvpn/nyxia.tuxmen.de.crt
key /etc/openvpn/nyxia.tuxmen.de.key
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
pull
comp-lzo
verb 3