Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision | ||
|
technical:openvpn-bridges-prep-openvpn [2023/10/21 06:08] admin [Test ifconfig] |
technical:openvpn-bridges-prep-openvpn [2024/01/11 13:24] (current) admin [OpenVPN server config for br0.103] |
||
|---|---|---|---|
| Line 9: | Line 9: | ||
| * We are not going to use encryption of the tunnel. | * We are not going to use encryption of the tunnel. | ||
| * We are not going to use the PKI. | * We are not going to use the PKI. | ||
| - | * We are compressing the data. | + | * We are not compressing the data. |
| * We are using a username and password given by the client and pass it onto a script to verify if the client is valid. | * We are using a username and password given by the client and pass it onto a script to verify if the client is valid. | ||
| * Remove / | * Remove / | ||
| Line 17: | Line 17: | ||
| ===== OpenVPN server config for br0.101 ===== | ===== OpenVPN server config for br0.101 ===== | ||
| * Create a file called **/ | * Create a file called **/ | ||
| - | * Be sure to check the correct value for eth0.101. It might be eth1.101 with your config. (up “/ | + | * Be sure to check the correct value for eth1.101. It might be eth0.101 with your config. (up “/ |
| <file bash server_vlan_101.conf> | <file bash server_vlan_101.conf> | ||
| mode server | mode server | ||
| - | + | ||
| auth none | auth none | ||
| - | cipher none | + | |
| - | + | ||
| tmp-dir /dev/shm | tmp-dir /dev/shm | ||
| - | + | ||
| auth-user-pass-verify "/ | auth-user-pass-verify "/ | ||
| verify-client-cert none | verify-client-cert none | ||
| username-as-common-name | username-as-common-name | ||
| script-security 2 | script-security 2 | ||
| - | + | ||
| - | local 198.27.111.78 | + | local 178.1.1.20 |
| port 1194 | port 1194 | ||
| proto udp | proto udp | ||
| Line 39: | Line 38: | ||
| key server.key | key server.key | ||
| dh dh.pem | dh dh.pem | ||
| - | + | ||
| - | up "/ | + | up "/ |
| server-bridge 10.101.0.1 255.255.0.0 10.101.0.2 10.101.0.100 | server-bridge 10.101.0.1 255.255.0.0 10.101.0.2 10.101.0.100 | ||
| - | + | ||
| ifconfig-pool-persist ipp.txt | ifconfig-pool-persist ipp.txt | ||
| ; | ; | ||
| keepalive 10 120 | keepalive 10 120 | ||
| - | comp-lzo | ||
| persist-key | persist-key | ||
| persist-tun | persist-tun | ||
| status openvpn-status.log | status openvpn-status.log | ||
| verb 4 | verb 4 | ||
| + | allow-compression no | ||
| + | data-ciphers none | ||
| + | cipher none | ||
| </ | </ | ||
| Line 60: | Line 61: | ||
| auth none | auth none | ||
| - | cipher none | ||
| tmp-dir /dev/shm | tmp-dir /dev/shm | ||
| Line 69: | Line 69: | ||
| script-security 2 | script-security 2 | ||
| - | local 198.27.111.78 | + | local 178.1.1.20 |
| port 1195 | port 1195 | ||
| proto udp | proto udp | ||
| Line 78: | Line 78: | ||
| dh dh.pem | dh dh.pem | ||
| - | up "/ | + | up "/ |
| server-bridge 10.102.0.1 255.255.0.0 10.102.0.2 10.102.0.100 | server-bridge 10.102.0.1 255.255.0.0 10.102.0.2 10.102.0.100 | ||
| Line 84: | Line 84: | ||
| ; | ; | ||
| keepalive 10 120 | keepalive 10 120 | ||
| - | comp-lzo | ||
| persist-key | persist-key | ||
| persist-tun | persist-tun | ||
| status openvpn-status.log | status openvpn-status.log | ||
| verb 4 | verb 4 | ||
| + | allow-compression no | ||
| + | data-ciphers none | ||
| + | cipher none | ||
| </ | </ | ||
| Line 98: | Line 100: | ||
| auth none | auth none | ||
| - | cipher none | ||
| tmp-dir /dev/shm | tmp-dir /dev/shm | ||
| Line 107: | Line 108: | ||
| script-security 2 | script-security 2 | ||
| - | local 198.27.111.78 | + | local 178.1.1.20 |
| port 1196 | port 1196 | ||
| proto udp | proto udp | ||
| Line 116: | Line 117: | ||
| dh dh.pem | dh dh.pem | ||
| - | up "/ | + | up "/ |
| server-bridge 10.103.0.1 255.255.0.0 10.103.0.2 10.103.0.100 | server-bridge 10.103.0.1 255.255.0.0 10.103.0.2 10.103.0.100 | ||
| Line 122: | Line 123: | ||
| ; | ; | ||
| keepalive 10 120 | keepalive 10 120 | ||
| - | comp-lzo | ||
| persist-key | persist-key | ||
| persist-tun | persist-tun | ||
| status openvpn-status.log | status openvpn-status.log | ||
| verb 4 | verb 4 | ||
| + | allow-compression no | ||
| + | data-ciphers none | ||
| + | cipher none | ||
| </ | </ | ||
| ===== Prepare / | ===== Prepare / | ||
| Line 167: | Line 170: | ||
| sudo chmod 755 / | sudo chmod 755 / | ||
| </ | </ | ||
| - | * Make sure the Perl modules that are used by this script | + | * Make sure the Perl modules that are used by this script |
| <code bash> | <code bash> | ||
| sudo apt-get install liblwp-protocol-https-perl | sudo apt-get install liblwp-protocol-https-perl | ||