Difference between revisions of "Template:Networking rut configuration example openvpn bridge use case"
From Teltonika Networks Wiki
(35 intermediate revisions by the same user not shown) | |||
Line 3: | Line 3: | ||
<th width=325; style="border-bottom: 1px solid white;></th> | <th width=325; style="border-bottom: 1px solid white;></th> | ||
<th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | <th width=820; style="border-bottom: 1px solid white;" rowspan=2;> | ||
− | [[File: | + | [[File:Networking_rut_configuration_example_openvpn_bridge_use_case_topology_v1.png|border|class=tlt-border|750px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
Line 17: | Line 17: | ||
'''Prerequisites''': | '''Prerequisites''': | ||
− | * | + | * One RUTxxx router |
* A Public Static or Public Dynamic IP addresses | * A Public Static or Public Dynamic IP addresses | ||
* An end device to configure the router (PC, Laptop, Tablet, Smartphone) | * An end device to configure the router (PC, Laptop, Tablet, Smartphone) | ||
− | The topology above depicts the OpenVPN scheme. The router with the Public IP address (''' | + | The topology above depicts the OpenVPN scheme. - The router with the Public IP address ('''''{{{name}}}''''') acts as the '''OpenVPN server''' and other '''{{{name}}}''' acts as '''client'''. OpenVPN connects the networks of '''HQ Office''' and '''Remote Office'''. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds. |
− | When the scheme is realized, remote office workers will be able to reach HQ’s internal network with all internal systems, allowing working from remote office to be possible | + | When the scheme is realized, remote office workers will be able to reach HQ’s internal network with all internal systems, allowing working from remote office to be possible. |
==Configuring HQ office router== | ==Configuring HQ office router== | ||
===OpenVPN=== | ===OpenVPN=== | ||
− | |||
− | |||
---- | ---- | ||
Line 38: | Line 36: | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | Login to the router's WebUI | + | Login to the router's WebUI and navigate to the '''Services → CLI''' page and do the following: |
<ol> | <ol> | ||
<li>Enter username '''''root''''' .</li> | <li>Enter username '''''root''''' .</li> | ||
Line 52: | Line 50: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_2_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | Write the following commands to create | + | Write the following commands to create and get'''Static key''': |
− | + | <ol> | |
− | + | <li>cd /etc/easy-rsa</li> | |
+ | <li>openvpn --genkey --secret static.key</li> | ||
+ | <li>cat static.key</li> | ||
+ | </ol> | ||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
---- | ---- | ||
Line 80: | Line 69: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_3_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 96: | Line 83: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_4_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 129: | Line 101: | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 145: | Line 107: | ||
==Configuring remote office router== | ==Configuring remote office router== | ||
− | + | ===OpenVPN=== | |
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | == | ||
---- | ---- | ||
Line 160: | Line 113: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_6_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
− | |||
− | |||
− | |||
---- | ---- | ||
Line 183: | Line 127: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_7_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | ||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> | ||
+ | ===LAN=== | ||
---- | ---- | ||
Line 197: | Line 142: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_8_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
− | |||
</td> | </td> | ||
</tr> | </tr> | ||
Line 222: | Line 156: | ||
<tr> | <tr> | ||
<th width=525; style="border-bottom: 1px solid white;></th> | <th width=525; style="border-bottom: 1px solid white;></th> | ||
− | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File: | + | <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_9_v1.png|border|class=tlt-border|550px|right]]</th> |
</tr> | </tr> | ||
<tr> | <tr> | ||
<td style="border-bottom: 1px solid white> | <td style="border-bottom: 1px solid white> | ||
− | + | ||
</td> | </td> | ||
</tr> | </tr> | ||
</table> | </table> |
Revision as of 16:20, 4 May 2020
|
Configuration overview and prerequisites
Prerequisites:
- One RUTxxx router
- A Public Static or Public Dynamic IP addresses
- An end device to configure the router (PC, Laptop, Tablet, Smartphone)
The topology above depicts the OpenVPN scheme. - The router with the Public IP address ({{{name}}}) acts as the OpenVPN server and other {{{name}}} acts as client. OpenVPN connects the networks of HQ Office and Remote Office. Only LAN traffic is going to go through that tunnel, any other WAN traffic won't go through it. This way the VPN tunnel will not be under a huge load and will provide greater speeds.
When the scheme is realized, remote office workers will be able to reach HQ’s internal network with all internal systems, allowing working from remote office to be possible.
Configuring HQ office router
OpenVPN
Login to the router's WebUI and navigate to the Services → CLI page and do the following:
|
Write the following commands to create and getStatic key:
|