|
352.
|
|
|
sudo apt install bridge-utils
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:592(command) serverguide/C/network-config.xml:542(command)
|
|
353.
|
|
|
Before you setup OpenVPN in bridged mode you need to change your interface configuration. Let's assume your server has an interface eth0 connected to the internet and an interface eth1 connected to the LAN you want to bridge. Your /etc/network/interfaces would like this:
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:595(para)
|
|
354.
|
|
|
![](/@@/translation-newline)
auto eth0 ![](/@@/translation-newline)
iface eth0 inet static
address 1.2.3.4
netmask 255.255.255.248
default 1.2.3.1
![](/@@/translation-newline)
auto eth1 ![](/@@/translation-newline)
iface eth1 inet static
address 10.0.0.4
netmask 255.255.255.0
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
represents a space character.
Enter a space in the equivalent position in the translation.
|
|
|
|
![](/@@/translation-newline)
auto eth0 ![](/@@/translation-newline)
iface eth0 inet static
address 1.2.3.4
netmask 255.255.255.248
default 1.2.3.1
![](/@@/translation-newline)
auto eth1 ![](/@@/translation-newline)
iface eth1 inet static
address 10.0.0.4
netmask 255.255.255.0
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:599(programlisting)
|
|
355.
|
|
|
This straight forward interface config needs to be changed into a bridged mode like where the config of interface eth1 moves to the new br0 interface. Plus we configure that br0 should bridge interface eth1. We also need to make sure that interface eth1 is always in promiscuous mode - this tells the interface to forward all ethernet frames to the IP stack.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:612(para)
|
|
356.
|
|
|
![](/@@/translation-newline)
auto eth0 ![](/@@/translation-newline)
iface eth0 inet static
address 1.2.3.4
netmask 255.255.255.248
default 1.2.3.1
![](/@@/translation-newline)
auto eth1 ![](/@@/translation-newline)
iface eth1 inet manual
up ip link set $IFACE up promisc on
![](/@@/translation-newline)
auto br0 ![](/@@/translation-newline)
iface br0 inet static
address 10.0.0.4
netmask 255.255.255.0
bridge_ports eth1
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
represents a space character.
Enter a space in the equivalent position in the translation.
|
|
|
|
![](/@@/translation-newline)
auto eth0 ![](/@@/translation-newline)
iface eth0 inet static
address 1.2.3.4
netmask 255.255.255.248
default 1.2.3.1
![](/@@/translation-newline)
auto eth1 ![](/@@/translation-newline)
iface eth1 inet manual
up ip link set $IFACE up promisc on
![](/@@/translation-newline)
auto br0 ![](/@@/translation-newline)
iface br0 inet static
address 10.0.0.4
netmask 255.255.255.0
bridge_ports eth1
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:616(programlisting)
|
|
357.
|
|
|
At this point you need to bring up the bridge. Be prepared that this might not work as expected and that you will lose remote connectivity. Make sure you can solve problems having local access.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:634(para)
|
|
358.
|
|
|
sudo ifdown eth1 && sudo ifup -a
|
|
|
|
sudo ifdown eth1 && sudo ifup -a
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
serverguide/C/vpn.xml:638(command)
|
|
359.
|
|
|
Prepare server config for bridging
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:643(title)
|
|
360.
|
|
|
Edit <filename>/etc/openvpn/server.conf</filename> changing the following options to:
|
|
|
|
Edite <filename>/etc/openvpn/server.conf</filename> cambiando las siguientes opciones a:
|
|
Translated by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:645(para)
|
|
361.
|
|
|
![](/@@/translation-newline)
;dev tun ![](/@@/translation-newline)
dev tap ![](/@@/translation-newline)
up "/etc/openvpn/up.sh br0 eth1" ![](/@@/translation-newline)
;server 10.8.0.0 255.255.255.0 ![](/@@/translation-newline)
server-bridge 10.0.0.4 255.255.255.0 10.0.0.128 10.0.0.254
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
![](/@@/translation-newline)
;dev tun ![](/@@/translation-newline)
dev tap ![](/@@/translation-newline)
up "/etc/openvpn/up.sh br0 eth1" ![](/@@/translation-newline)
;server 10.8.0.0 255.255.255.0 ![](/@@/translation-newline)
server-bridge 10.0.0.4 255.255.255.0 10.0.0.128 10.0.0.254
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:649(programlisting)
|