Temat: OpenVPN TUN
Cześć,
ustawiłem sobie tunel VPN miedzy dwoma openWRT luci. Tunel działa, z routera w domu widzę urządzenia za routerem na działce, ale brakuje mi jeszcze abym widział z komputera za routerem w domu inne urządzenia za routerem na działce.
co zrobiłem:
DOM
uci set network.vpn=interface
uci set network.vpn.device=tun0
uci set network.vpn.proto=none
uci commit
uci add firewall zone
uci set firewall.@zone[-1].name=vpn
uci set firewall.@zone[-1].input=ACCEPT
uci set firewall.@zone[-1].forward=ACCEPT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].network=vpn
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='vpn'
uci set firewall.@forwarding[-1].dest='wan'
uci add firewall rule
uci set firewall.@rule[-1].name=OpenVPN
uci set firewall.@rule[-1].target=ACCEPT
uci set firewall.@rule[-1].src=wan
uci set firewall.@rule[-1].proto=tcp
uci set firewall.@rule[-1].dest_port=1194
uci commit firewall
uci set openvpn.home=openvpn
uci set openvpn.home.enabled=1
uci set openvpn.home.dev=tun0
uci set openvpn.home.port=1194
uci set openvpn.home.proto=udp
uci set openvpn.home.log=/tmp/openvpn.log
uci set openvpn.home.verb=3
uci set openvpn.home.ca=/etc/openvpn/ca.crt
uci set openvpn.home.cert=/etc/openvpn/serwer.crt
uci set openvpn.home.key=/etc/openvpn/serwer.key
uci set openvpn.home.server='10.8.0.0 255.255.255.0'
uci set openvpn.home.topology=subnet
uci set openvpn.home.dh=/etc/openvpn/dh.pem
uci commit openvpn
reboot
uci add_list openvpn.home.route='192.168.2.0 255.255.255.0'
uci add_list openvpn.home.push='route 192.168.2.0 255.255.255.0'
uci set openvpn.home.client_to_client='1'
uci set openvpn.home.client_config_dir='/etc/openvpn/ccd'
mkdir -p /etc/openvpn/ccd
echo "iroute 192.168.2.0 255.255.255.0" >> /etc/openvpn/ccd/malgosia
uci commit
/etc/init.d/openvpn restart
Klient
uci set openvpn.dzialka=openvpn
uci set openvpn.dzialka.enabled=1
uci set openvpn.dzialka.dev=tun0
uci set openvpn.dzialka.proto=tcp
uci set openvpn.dzialka.log=/tmp/openvpn.log
uci set openvpn.dzialka.verb=3
uci set openvpn.dzialka.ca=/etc/openvpn/ca.crt
uci set openvpn.dzialka.cert=/etc/openvpn/dzialka.crt
uci set openvpn.dzialka.key=/etc/openvpn/dzialka.key
uci set openvpn.dzialka.client=1
uci set openvpn.dzialka.remote_cert_tls=server
uci set openvpn.dzialka.remote="80.xxxx.xxx.7 1194"
uci commit openvpn
/etc/init.d/openvpn enable
/etc/init.d/openvpn start
uci set network.vpn=interface
uci set network.vpn.ifname=tun0
uci set network.vpn.proto=none
uci commit
uci add firewall zone
uci set firewall.@zone[-1].name=vpn
uci set firewall.@zone[-1].input=ACCEPT
uci set firewall.@zone[-1].forward=ACCEPT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].network=vpn
uci set firewall.@zone[-1].masq=1
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='vpn'
uci set firewall.@forwarding[-1].dest='lan'
uci commit
reboot
próbowalem dodać strefę FW na routerze w domu
uci add firewall zone
uci set firewall.@zone[-1].name=vpn
uci set firewall.@zone[-1].input=ACCEPT
uci set firewall.@zone[-1].forward=ACCEPT
uci set firewall.@zone[-1].output=ACCEPT
uci set firewall.@zone[-1].network=vpn
uci set firewall.@zone[-1].masq=1
uci add firewall forwarding
uci set firewall.@forwarding[-1].src='lan'
uci set firewall.@forwarding[-1].dest='vpn'
uci commit
ale to nie to.
Asus N18U