|
357.
|
|
|
At this point you need to bring up the bridge. Be prepared that this might not work as expected and that you will lose remote connectivity. Make sure you can solve problems having local access.
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:634(para)
|
|
358.
|
|
|
sudo ifdown eth1 && sudo ifup -a
|
|
|
|
sudo ifdown eth1 && sudo ifup -a
|
|
Translated and reviewed by
Adolfo Jayme Barrientos
|
|
|
|
Located in
serverguide/C/vpn.xml:638(command)
|
|
359.
|
|
|
Prepare server config for bridging
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:643(title)
|
|
360.
|
|
|
Edit <filename>/etc/openvpn/server.conf</filename> changing the following options to:
|
|
|
|
Edite <filename>/etc/openvpn/server.conf</filename> cambiando las siguientes opciones a:
|
|
Translated by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:645(para)
|
|
361.
|
|
|
![](/@@/translation-newline)
;dev tun ![](/@@/translation-newline)
dev tap ![](/@@/translation-newline)
up "/etc/openvpn/up.sh br0 eth1" ![](/@@/translation-newline)
;server 10.8.0.0 255.255.255.0 ![](/@@/translation-newline)
server-bridge 10.0.0.4 255.255.255.0 10.0.0.128 10.0.0.254
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
![](/@@/translation-newline)
;dev tun ![](/@@/translation-newline)
dev tap ![](/@@/translation-newline)
up "/etc/openvpn/up.sh br0 eth1" ![](/@@/translation-newline)
;server 10.8.0.0 255.255.255.0 ![](/@@/translation-newline)
server-bridge 10.0.0.4 255.255.255.0 10.0.0.128 10.0.0.254
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:649(programlisting)
|
|
362.
|
|
|
Next, create a helper script to add the <emphasis>tap</emphasis> interface to the bridge and to ensure that eth1 is promiscuous mode. Create <filename>/etc/openvpn/up.sh</filename>:
|
|
|
|
(no translation yet)
|
|
|
|
Located in
serverguide/C/vpn.xml:657(para)
|
|
363.
|
|
|
![](/@@/translation-newline)
#!/bin/sh
![](/@@/translation-newline)
BR=$1 ![](/@@/translation-newline)
ETHDEV=$2 ![](/@@/translation-newline)
TAPDEV=$3
![](/@@/translation-newline)
/sbin/ip link set "$TAPDEV" up ![](/@@/translation-newline)
/sbin/ip link set "$ETHDEV" promisc on ![](/@@/translation-newline)
/sbin/brctl addif $BR $TAPDEV
|
|
|
represents a line break.
Start a new line in the equivalent position in the translation.
|
|
|
|
![](/@@/translation-newline)
#!/bin/sh
![](/@@/translation-newline)
BR=$1 ![](/@@/translation-newline)
ETHDEV=$2 ![](/@@/translation-newline)
TAPDEV=$3
![](/@@/translation-newline)
/sbin/ip link set "$TAPDEV" up ![](/@@/translation-newline)
/sbin/ip link set "$ETHDEV" promisc on ![](/@@/translation-newline)
/sbin/brctl addif $BR $TAPDEV
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:661(programlisting)
|
|
364.
|
|
|
Then make it executable:
|
|
|
|
Luego, conviértalo en ejecutable:
|
|
Translated by
Federico Lazcano
|
|
Reviewed by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:673(para)
|
|
365.
|
|
|
sudo chmod 755 /etc/openvpn/up.sh
|
|
|
|
sudo chmod 755 /etc/openvpn/up.sh
|
|
Translated by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:678(command)
|
|
366.
|
|
|
After configuring the server, restart <application>openvpn</application> by entering:
|
|
|
|
Después de configurado el servidor, reinicie <application>openvpn</application> introduciendo:
|
|
Translated by
Paco Molinero
|
|
|
|
Located in
serverguide/C/vpn.xml:681(para)
|