Teltonika Networks Wiki

Changes

Template:Networking rut configuration example openvpn bridge use case (view source)

Revision as of 15:00, 10 July 2020

1,981 bytes added ,  15:00, 10 July 2020
→‎Configuring remote office router
Line 3: Line 3:  
         <th width=325; style="border-bottom: 1px solid white;></th>
 
         <th width=325; style="border-bottom: 1px solid white;></th>
 
         <th width=820; style="border-bottom: 1px solid white;" rowspan=2;>
 
         <th width=820; style="border-bottom: 1px solid white;" rowspan=2;>
−
[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_topology_v1.png|border|class=tlt-border|750px|right]]</th>
+
[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_topology_v3.png|border|class=tlt-border|750px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
Line 27: Line 27:  
==Configuring HQ office router==
 
==Configuring HQ office router==
 
===OpenVPN===
 
===OpenVPN===
 +
----
 +
====Generating Static key====
 
----
 
----
   Line 61: Line 63:  
</table>
 
</table>
    +
====Extracting the key====
 +
----
 +
=====Linux=====
 +
----
 +
 +
If you are using a Linux-based OS, extracting files from the router is simple. Just go to the directory on your PC where you want to relocate the files, right click anywhere and choose the '''Open in Terminal''' option. In the Terminal command line use the '''Secure Copy''' ('''scp''') command to copy the files from the router. The full command should look something like this:
 +
 +
$ scp [email protected]:/etc/easy-rsa/static.key ./
 +
 +
The '''[email protected]:/etc/easy-rsa/static.key''' specifies the path to where the Static key is located (replace the IP address with your router's LAN IP); the '''./''' denotes that you want to copy the contents to the directory you are in at the moment.
 +
 +
=====Windows=====
 
----
 
----
   Line 66: Line 80:  
     <tr>
 
     <tr>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
−
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_3_v1.png|border|class=tlt-border|550px|right]]</th>
+
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Winscp login instructions.PNG|border|class=tlt-border|550px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white>
 
         <td style="border-bottom: 1px solid white>
−
Create '''.txt''' file on your computer and copy '''Static key''' to it. Copy from the beginning to the end as in the example.
+
If you are using Windows, you can copy files from the router using '''WinSCP''', an Open source freeware SFTP, SCP and FTP client for Windows OS. Use the same login information with WinSCP as with CLI or SSH.
 +
 
 +
'''Please note''': You must select '''SCP''' as File Protocol in WinSCP Session settings.
 
         </td>
 
         </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
    +
----
 +
 +
<table class="nd-othertables_2">
 +
    <tr>
 +
        <th width=525; style="border-bottom: 1px solid white;></th>
 +
        <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Winscp interface example.PNG|border|class=tlt-border|550px|right]]</th>
 +
    </tr>
 +
    <tr>
 +
        <td style="border-bottom: 1px solid white>
 +
Once you've connected to the router with WinSCP, copying the files should be simple enough: just go to '''/etc/easy-rsa/''', select the Static key file and drag it to directory on your PC where you would like to store it.
 +
        </td>
 +
    </tr>
 +
</table>
 +
 +
====Configuring OpenVPN server====
 
----
 
----
   Line 106: Line 137:  
     <li>Select '''Authentication: Static key'''.</li>
 
     <li>Select '''Authentication: Static key'''.</li>
 
     <li>Add '''Keep alive''' interval: '''10 120'''.</li>
 
     <li>Add '''Keep alive''' interval: '''10 120'''.</li>
−
     <li>Upload '''Static pre-shared key''' (use the .txt file you created in previous steps).</li>
+
     <li>Upload '''Static pre-shared key'''.</li>
 
     <li>'''Save''' the changes.</li>
 
     <li>'''Save''' the changes.</li>
 
</ol>
 
</ol>
Line 114: Line 145:     
==Configuring remote office router==
 
==Configuring remote office router==
−
===OpenVPN===
+
 
 +
Before you start configuring the remote office router, set a static IP address on the device you are configuring the router with (e.g. 192.168.1.10). You can find instructions on how to do that here:
 +
 
 +
[[Setting_up_a_Static_IP_address_on_a_Ubuntu_16.04_PC|Ubuntu]]
 +
 
 +
[[Setting up a Static IP address on a Windows 10 PC|Windows]]
 +
 
 +
<span style="color: red;">'''Note: make sure to switch back to automatic DNS and IP address obtaining when you are done configuring the router.'''</span>
 +
 
 +
===LAN===
 
----
 
----
   Line 120: Line 160:  
     <tr>
 
     <tr>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
−
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_6_v1.png|border|class=tlt-border|550px|right]]</th>
+
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_8_v1.png|border|class=tlt-border|550px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white>
 
         <td style="border-bottom: 1px solid white>
−
Go to '''Services → VPN → OpenVPN'''. There create a new configuration by selecting role '''Client''', writing '''New configuration name''' and pressing '''Add New''' button. It should appear after a few seconds. Then press '''Edit'''.  
+
Go to '''Network → LAN''' and apply the following steps:
 +
 
 +
<ol>
 +
    <li>Change your '''LAN IP address''' to: '''192.168.1.2</li>
 +
    <li>Disable '''DHCP'''.</li>
 +
    <li>'''Save''' the changes.</li>
 +
</ol>
 
         </td>
 
         </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
    +
===OpenVPN===
 +
----
 +
====Configuring OpenVPN client====
 
----
 
----
   Line 134: Line 183:  
     <tr>
 
     <tr>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
−
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_7_v1.png|border|class=tlt-border|550px|right]]</th>
+
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_6_v1.png|border|class=tlt-border|550px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white>
 
         <td style="border-bottom: 1px solid white>
−
Now apply the following configuration:
+
Go to '''Services → VPN → OpenVPN'''. There create a new configuration by selecting role '''Client''', writing '''New configuration name''' and pressing '''Add New''' button. It should appear after a few seconds. Then press '''Edit'''.  
−
 
  −
<ol>
  −
    <li>'''Enable''' instance.</li>
  −
    <li>Set '''TUN/TAP''' to '''TAP (bridged)'''.</li>
  −
    <li>Enable '''LZO'''.</li>
  −
    <li>Select '''Authentication: Static key'''.</li>
  −
    <li>Write '''Remote host/IP address''' (RUT OpenVPN server public IP).</li>
  −
    <li>Add '''Keep alive''' interval: '''10 120'''.</li>
  −
    <li>Upload '''Static pre-shared key''' (use the .txt file you created in previous steps).</li>
  −
    <li>'''Save''' the changes.</li>
  −
</ol>
   
         </td>
 
         </td>
 
     </tr>
 
     </tr>
 
</table>
 
</table>
   −
===LAN===
   
----
 
----
   Line 160: Line 197:  
     <tr>
 
     <tr>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
 
         <th width=525; style="border-bottom: 1px solid white;></th>
−
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_8_v1.png|border|class=tlt-border|550px|right]]</th>
+
         <th width=620; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rut_configuration_example_openvpn_bridge_use_case_7_v2.png|border|class=tlt-border|550px|right]]</th>
 
     </tr>
 
     </tr>
 
     <tr>
 
     <tr>
 
         <td style="border-bottom: 1px solid white>
 
         <td style="border-bottom: 1px solid white>
−
Now go to '''Network → LAN''' and apply the following steps:
+
Now apply the following configuration:
    
<ol>
 
<ol>
−
     <li>Change your '''LAN IP address''' to: '''192.168.1.2</li>
+
     <li>'''Enable''' instance.</li>
−
     <li>Disable '''DHCP'''.</li>
+
    <li>Set '''TUN/TAP''' to '''TAP (bridged)'''.</li>
 +
    <li>Enable '''LZO'''.</li>
 +
    <li>Select '''Authentication: Static key'''.</li>
 +
    <li>Write '''Remote host/IP address''' (RUT OpenVPN server public IP).</li>
 +
    <li>Add '''Keep alive''' interval: '''10 120'''.</li>
 +
     <li>Upload '''Static pre-shared key'''.</li>
 
     <li>'''Save''' the changes.</li>
 
     <li>'''Save''' the changes.</li>
 
</ol>
 
</ol>
Justinasm
0

edits

Retrieved from "https://wiki.teltonika-networks.com/view/Special:MobileDiff/60914...66557"