Moxa V2401-CE Руководство по программной части (Linux) онлайн [57/108] 170746

V2401/2402 Series Linux User’s Manual Managing Communications

3-30

2. Generate a preset shared key by typing the command:

# openvpn --genkey --secret secrouter.key

3. Copy the file that is generated to the OpenVPN machine:

# scp /etc/openvpn/secrouter.key 192.168.8.174:/etc/openvpn

ATTENTION

A preshared key is located at /etc/openvpn/secrouter.key. You can use it for testing purposes.

We suggest creating a new key for non-testing purpose.

4. On machine OpenVPN A, modify the remote address in the configuration file

/etc/openvpn/tap0-br.conf.

5. Next, modify the routing table in the /etc/openvpn/tap0-br.sh script file.

# point to the peer

remote 192.168.8.174

dev tap0

port 1194

secret /etc/openvpn/secrouter.key

cipher DES-EDE3-CBC

auth MD5

tun-mtu 1500

tun-mtu-extra 64

ping 40

up /etc/openvpn/tap0-br.sh

#comp

lzo

#--------------------------Start---------------------------

#!/bin/sh

# value after “-net” is the subnet behind the remote peer

route add -net 192.168.4.0 netmask 255.255.255.0 dev br0

#----------------------------end---------------------------