[Sysadmins] Opnvpn в режиме bridged

[Денис Ягофаров]

п■п╬п╠я─я▀п╧ п╢п╣п╫я▄.

п÷я─п╬п╠я┐я▌ п©п╬п╢п╫я▐я┌я▄ openvpn п╡ я─п╣п╤п╦п╪п╣ bridged.
п▓ я─п╣п╤п╦п╪п╣ routed п╡я│я▒ п╬я┌п╩п╦я┤п╫п╬ я─п╟п╠п╬я┌п╟п╣я┌.

п▓п╬я┌ п╨п╬п╫я└п╦пЁ:

port 31194
proto tcp
dev tap
#dev-node tap0
ca   /etc/openvpn/keys/ca.cert
cert /etc/openvpn/keys/server.cert
key  /etc/openvpn/keys/server.key  # This file should be kept secret!
dh /etc/openvpn/keys/dh1024.pem
ifconfig-pool-persist ipp.txt
# Configure server mode for ethernet bridging.
# You must first use your OS's bridging capability
# to bridge the TAP interface with the ethernet
# NIC interface.  Then you must manually set the
# IP/netmask on the bridge interface, here we
# assume 10.8.0.4/255.255.255.0.  Finally we
# must set aside an IP range in this subnet
# (start=10.8.0.50 end=10.8.0.100) to allocate
# to connecting clients.  Leave this line commented
# out unless you are ethernet bridging.
server-bridge 192.168.100.250 255.255.0.0 192.168.100.50 192.168.100.98
push "route 192.168.10.0 255.255.255.0"
keepalive 10 120
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3

п▓ п╨п╬п╪п╪п╣п╫я┌п╟я─п╦я▐я┘ п╨ п╨п╬п╫я└п╦пЁя┐ пЁп╬п╡п╬я─п╦я┌я│я▐:
# You must first use your OS's bridging capability
# to bridge the TAP interface with the ethernet
# NIC interface.  Then you must manually set the
# IP/netmask on the bridge interface

п■п╩я▐ я█я┌п╬пЁп╬ я▐ п╦я│п©п╬п╩я▄п╥я┐я▌ п╡п╬я┌ я█я┌п╬я┌ я│п╨я─п╦п©я┌ 
http://openvpn.net/bridge.html#linuxscript
п▓п╬я┌ я┌п╬п╩я▄п╨п╬ п╨п╬пЁп╢п╟ п╥п╟п©я┐я│п╨п╟п╣я┌я│я▐ я│п╣я─п╡п╦я│, п╬п╫ п╦я│п©п╬п╩я▄п╥я┐п╣я┌ tap1
п╦ п╫п╣ п╫п╟я┘п╬п╢п╦я┌ п╫п╦п╨п╟п╨п╦я┘ tap0. п╒п╟п╨п╬пЁп╬ я┐я│я┌я─п╬п╧я│я┌п╡п╟ п╦ я▐ я┌п╣ п╫п╣п╫п╟я┘п╬п╤я┐.... п╡ 
п╬я┌п╩п╦я┤п╦п╦ п╬я┌
/dev/net/tup.

п╒п╟п╨ п╨п╟п╨ я│п╬п╥п╢п╟я┌я▄ tap0 п╢п╬ я│я┌п╟я─я┌п╟ openvpn п╦ п╥п╟я│я┌п╟п╡п╦я┌я▄ я│п╣я─п╡п╦п╥ п╦я│п©п╬п╩я▄п╥п╬п╡п╟я┌я▄ п╣пЁп╬?


----------- следующая часть -----------
п▒я▀п╩п╬ я┐п╢п╟п╩п╣п╫п╬ п╡п╩п╬п╤п╣п╫п╦п╣ п╫п╣ п╡ я┌п╣п╨я│я┌п╬п╡п╬п╪ я└п╬я─п╪п╟я┌п╣...
п≤п╪я▐     : denyago.vcf
п╒п╦п©     : text/x-vcard
п═п╟п╥п╪п╣я─  : 278 п╠п╟п╧я┌п╬п╡
п·п©п╦я│п╟п╫п╦п╣: п╬я┌я│я┐я┌я│я┌п╡я┐п╣я┌
Url     : http://lists.altlinux.org/pipermail/sysadmins/attachments/20080118/05318fd5/attachment.vcf