documentation:examples:gre_ipsec_and_openvpn
Differences
This shows you the differences between two versions of the page.
| Both sides previous revisionPrevious revisionNext revision | Previous revisionNext revisionBoth sides next revision | ||
| documentation:examples:gre_ipsec_and_openvpn [2020/01/13 14:17] – [Router 2] olivier | documentation:examples:gre_ipsec_and_openvpn [2020/09/15 16:21] – [Router 2] olivier | ||
|---|---|---|---|
| Line 238: | Line 238: | ||
| If you have previous gre configuration from the gre example: remove them. | If you have previous gre configuration from the gre example: remove them. | ||
| - | |||
| - | Here is the line to ADD to / | ||
| < | < | ||
| Line 252: | Line 250: | ||
| service routing restart | service routing restart | ||
| config save | config save | ||
| + | </ | ||
| + | |||
| + | Take care of avoiding fragmentation, | ||
| + | < | ||
| + | [root@VM2]~# | ||
| + | set skip on lo0 | ||
| + | scrub on gif1 inet all max-mss 1200 | ||
| + | scrub on gif1 inet6 all max-mss 1180 | ||
| + | pass | ||
| </ | </ | ||
| ==== Router 4 ==== | ==== Router 4 ==== | ||
| Line 257: | Line 264: | ||
| Configure the 2 gif tunnel using VM2 addresses as end-point. | Configure the 2 gif tunnel using VM2 addresses as end-point. | ||
| - | Here are the changes to apply to rc file: | ||
| < | < | ||
| sysrc cloned_interfaces=" | sysrc cloned_interfaces=" | ||
| Line 1054: | Line 1060: | ||
| passwd | passwd | ||
| </ | </ | ||
| - | ==== VM4: OpenVPN client ==== | ||
| - | As OpenVPN | + | Now Generate |
| - | * ca.crt | + | |
| - | * VM4.crt | + | |
| - | * VM4.key | + | |
| - | On this lab, scp can be used for getting these files: | ||
| < | < | ||
| - | mkdir / | + | cat > / |
| - | scp 10.0.23.2:/ | + | |
| - | scp 10.0.23.2:/ | + | |
| - | scp 10.0.23.2:/ | + | |
| - | </ | + | |
| - | + | ||
| - | Configure openvpn as a client: | + | |
| - | + | ||
| - | < | + | |
| - | cat > / | + | |
| client | client | ||
| dev tun | dev tun | ||
| remote 10.0.23.2 | remote 10.0.23.2 | ||
| - | ca ca.crt | + | <ca> |
| - | cert VM4.crt | + | |
| - | key VM4.key | + | |
| ' | ' | ||
| + | cat / | ||
| + | echo '</ | ||
| + | echo '< | ||
| + | cat / | ||
| + | echo '</ | ||
| + | echo '< | ||
| + | cat / | ||
| + | echo '</ | ||
| </ | </ | ||
| + | ==== VM4: OpenVPN client ==== | ||
| + | |||
| + | As OpenVPN client, VM4 should get its openvpn configuration file (that embedded certificate and key) from VM2 and put them in / | ||
| + | |||
| + | On this lab, scp can be used for getting these files: | ||
| + | < | ||
| + | mkdir / | ||
| + | scp 10.0.23.2:/ | ||
| + | </ | ||
| + | |||
| Enable and start openvpn: | Enable and start openvpn: | ||
| Line 1222: | Line 1230: | ||
| Pinging VM5 from VM1: | Pinging VM5 from VM1: | ||
| + | |||
| + | < | ||
| + | [root@VM1]~# | ||
| + | PING 10.0.45.5 (10.0.45.5): | ||
| + | 64 bytes from 10.0.45.5: icmp_seq=0 ttl=62 time=2.135 ms | ||
| + | 64 bytes from 10.0.45.5: icmp_seq=1 ttl=62 time=0.783 ms | ||
| + | |||
| + | --- 10.0.45.5 ping statistics --- | ||
| + | 2 packets transmitted, | ||
| + | round-trip min/ | ||
| + | |||
| + | [root@VM1]~# | ||
| + | PING6(56=40+8+8 bytes) 2001: | ||
| + | 16 bytes from 2001: | ||
| + | 16 bytes from 2001: | ||
| + | |||
| + | --- 2001: | ||
| + | 2 packets transmitted, | ||
| + | round-trip min/ | ||
| + | </ | ||
documentation/examples/gre_ipsec_and_openvpn.txt · Last modified: 2023/07/10 12:40 by olivier