Changes

261 bytes added , 09:28, 27 January 2023

no edit summary

Line 3: Line 3:

−

[[File:~~Networking_rut_configuration_example_openvpn_bridge_use_case_topology_v1~~.png|border|class=tlt-border|750px|right]]</th>

+

[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_topology_v2.png|border|class=tlt-border|750px|right]]</th>

</tr>

<tr>

Line 28: Line 28:

===OpenVPN===

----

−

====Generating ~~static~~ key====

+

====Generating Static key====

----

Line 52: Line 52:

<tr>

−

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_example_openvpn_bridge_use_case_2_v1~~.png|770px|right]]</th>

+

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_2_v2.png|770px|right]]</th>

</tr>

<tr>

Line 65: Line 65:

====Extracting the key====

----

−

====Linux====

+

=====Linux=====

----

If you are using a Linux-based OS, extracting files from the router is simple. Just go to the directory on your PC where you want to relocate the files, right click anywhere and choose the '''Open in Terminal''' option. In the Terminal command line use the '''Secure Copy''' ('''scp''') command to copy the files from the router. The full command should look something like this:

−

$ scp [email protected]:/etc/easy-rsa~~/keys~~/static.key ./

+

$ scp [email protected]:/etc/easy-rsa/static.key ./

−

The '''[email protected]:/etc/easy-rsa~~/keys~~/static.key''' specifies the path to where the Static key is located (replace the IP address with your router's LAN IP); the '''./''' denotes that you want to copy the contents to the directory you are in at the moment.

+

The '''[email protected]:/etc/easy-rsa/static.key''' specifies the path to where the Static key is located (replace the IP address with your router's LAN IP); the '''./''' denotes that you want to copy the contents to the directory you are in at the moment.

−

====Windows====

+

=====Windows=====

----

Line 100: Line 100:

<tr>

−

Once you've connected to the router with WinSCP, copying the files should be simple enough: just ~~relocate~~ to ~~directory where you generated the key~~, select the Static key file and drag it to directory on your PC where you would like to store it.

+

Once you've connected to the router with WinSCP, copying the files should be simple enough: just go to '''/etc/easy-rsa/''', select the Static key file and drag it to directory on your PC where you would like to store it.

−

~~'''Please note''': You must select '''SCP''' as File Protocol in WinSCP Session settings~~.

</td>

</tr>

Line 139: Line 137:

<li>Select '''Authentication: Static key'''.</li>

<li>Add '''Keep alive''' interval: '''10 120'''.</li>

−

<li>Upload '''Static pre-shared key''' ~~(use the .txt file you created in previous steps)~~.</li>

+

<li>Upload '''Static pre-shared key'''.</li>

<li>'''Save''' the changes.</li>

</ol>

Line 147: Line 145:

==Configuring remote office router==

−

=~~==OpenVPN===~~

+

−

~~----~~

+

Before you start configuring the remote office router, set a static IP address on the device you are configuring the router with (e.g. 192.168.1.10). You can find instructions on how to do that here:

−

===~~=Configuring OpenVPN client=~~===

+

[[Setting_up_a_Static_IP_address_on_a_Ubuntu_16.04_PC|Ubuntu]]

+

[[Setting up a Static IP address on a Windows 10 PC|Windows]]

+

<span style="color: red;">'''Note: make sure to switch back to automatic DNS and IP address obtaining when you are done configuring the router.'''</span>

+

===LAN===

----

Line 155: Line 160:

<tr>

−

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_example_openvpn_bridge_use_case_6_v1~~.png|770px|right]]</th>

+

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_8_v1.png|770px|right]]</th>

</tr>

<tr>

−

Go to '''~~Services~~ → ~~VPN → OpenVPN'''. There create a new configuration by selecting role '''Client''', writing '''New configuration name~~''' and ~~pressing '''Add''' button. It should appear after a few seconds. Then~~ press '''Edit'''.

+

Go to '''Network → LAN''' and press '''Edit''' next to your LAN interface:

</td>

</tr>

Line 169: Line 174:

<tr>

−

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_example_openvpn_bridge_use_case_7_v1~~.png|770px|right]]</th>

+

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_9_v1.png|770px|right]]</th>

</tr>

<tr>

−

~~Now apply~~ the following ~~configuration~~:

+

Apply the following steps:

<ol>

−

<li>'''~~Enable''' instance.</li>~~

+

<li>Change your '''LAN IP address''' to: '''192.168.1.2</li>

−

~~<li>Set '''TUN/TAP~~''' to ~~'''TAP (bridged)'''.</li>~~

+

<li>Disable '''DHCP'''.</li>

−

~~<li>Enable '''LZO'''.</li>~~

−

~~<li>Select '''Authentication~~: ~~Static key~~'''.~~</li>~~

−

~~<li>Write '''Remote host/IP address''' (RUTX OpenVPN server public IP)~~.~~</li>~~

−

~~<li>Add '''Keep alive''' interval: '''10 120'''~~.</li>

−

<li>~~Upload~~ '''~~Static pre-shared key~~''' ~~(use the .txt file you created in previous steps)~~.</li>

<li>'''Save''' the changes.</li>

</ol>

Line 189: Line 189:

</table>

−

===~~LAN~~===

+

===OpenVPN===

+

----

+

====Configuring OpenVPN client====

----

Line 195: Line 197:

<tr>

−

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_example_openvpn_bridge_use_case_8_v1~~.png|770px|right]]</th>

+

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_6_v1.png|770px|right]]</th>

</tr>

<tr>

−

~~Now go~~ to '''~~Network~~ → ~~LAN~~''' and press '''Edit''' ~~next to your LAN interface:~~

+

Go to '''Services → VPN → OpenVPN'''. There create a new configuration by selecting role '''Client''', writing '''New configuration name''' and pressing '''Add''' button. It should appear after a few seconds. Then press '''Edit'''.

</td>

</tr>

Line 209: Line 211:

<tr>

−

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:~~Networking_rutx_configuration_example_openvpn_bridge_use_case_9_v1~~.png|770px|right]]</th>

+

<th width=790; style="border-bottom: 1px solid white;" rowspan=2>[[File:Networking_rutx_configuration_example_openvpn_bridge_use_case_7_v2.png|770px|right]]</th>

</tr>

<tr>

−

~~Apply~~ the following ~~steps~~:

+

Now apply the following configuration:

<ol>

−

<li>~~Change your~~ '''~~LAN IP address~~''' to: '''~~192~~.~~168~~.1.2</li>

+

<li>'''Enable''' instance.</li>

−

<li>~~Disable~~ '''~~DHCP~~'''.</li>

+

<li>Set '''TUN/TAP''' to '''TAP (bridged)'''.</li>

+

<li>Enable '''LZO'''.</li>

+

<li>Select '''Authentication: Static key'''.</li>

+

<li>Write '''Remote host/IP address''' (RUTX OpenVPN server public IP).</li>

+

<li>Add '''Keep alive''' interval: '''10 120'''.</li>

+

<li>Upload '''Static pre-shared key'''.</li>

<li>'''Save''' the changes.</li>

</ol>

Domnev

Administrators

1,108

edits

Changes

Template:Networking rutx configuration example openvpn bridge use case (view source)

Revision as of 09:28, 27 January 2023