Moxa UC-8416-T-LX [50/90] Point to the peer remote 192 68 74 dev tun secret etc openvpn secrouter key cipher des ede3 cbc auth md5 tun mtu 1500 tun mtu extra 64 ping 40 ifconfig 192 68 73 192 68 74 up...

Moxa UC-8418-T-LX [50/90] Point to the peer remote 192 68 74 dev tun secret etc openvpn secrouter key cipher des ede3 cbc auth md5 tun mtu 1500 tun mtu extra 64 ping 40 ifconfig 192 68 73 192 68 74 up etc openvpn tun sh
UC-8410/8416/8418/8430 Managing Communication
4-23
2. On machine OpenVPN A, modify the remote address in the configuration file, /etc/openvpn/tun.conf.
# point to the peer
remote 192.168.8.174
dev tun
secret /etc/openvpn/secrouter.key
cipher DES-EDE3-CBC
auth MD5
tun-mtu 1500
tun-mtu-extra 64
ping 40
ifconfig 192.168.2.173 192.168.4.174
up /etc/openvpn/tun.sh
Next, modify the routing table in the /etc/openvpn/tun.sh script file.
#--------------------------------- Start-----------------------------
#!/bin/sh
# value after “-net” is the subnet behind the remote peer
route add -net 192.168.4.0 netmask 255.255.255.0 gw $5
#--------------------------------- end ------------------------------
On machine OpenVPN B, modify the remote address in the configuration file, /etc/openvpn/tun.conf.
remote 192.168.8.173
dev tun
secret /etc/openvpn/secrouter.key
cipher DES-EDE3-CBC
auth MD5
tun-mtu 1500
tun-mtu-extra 64
ping 40
ifconfig 192.168.4.174 192.168.2.173
up /etc/openvpn/tun.sh
Next, modify the routing table in the /etc/openvpn/tun.sh script file.
#--------------------------------- Start----------------------------
#!/bin/sh
# value after “-net” is the subnet behind the remote peer
route add -net 192.168.2.0 netmask 255.255.255.0 gw $5
#--------------------------------- end -----------------------------
Note that the parameter “ifconfig” defines the first argument as the local internal interface and the second
argument as the internal interface at the remote peer.
Note that $5 is the argument that the OpenVPN program passes to the script file. Its value is the second
argument of ifconfig in the configuration file.
3. Check the routing table after you run the OpenVPN programs, by typing the command:
# route
Destination Gateway Genmsk Flags Metric Ref Use Iface
192.168.4.174 * 255.255.255.255 UH 0 0 0 tun0
192.168.4.0 192.168.4.174 255.255.255.0 UG 0 0 0 tun0
192.168.2.0 * 255.255.255.0 U 0 0 0 eth1
192.168.8.0 * 255.255.255.0 U 0 0 0 eth0

Содержание

Скачать