1
0
mirror of https://gitlab.com/shorewall/code.git synced 2024-12-30 18:19:04 +01:00

Corrections to OPENVPN doc.

Signed-off-by: Tom Eastep <teastep@shorewall.net>
This commit is contained in:
Tom Eastep 2011-07-30 06:57:55 -07:00
parent 42ae3ba581
commit 9e6fd39145

View File

@ -760,6 +760,12 @@ secret /etc/openvpn/bridgekey</programlisting>
/etc/network/interfaces (Debian and derivatives) will create the bridged
interfaces.</para>
<note>
<para>The stanzas below were written before bridges could be defined in
/etc/network/interfaces. For current usage, see bridge-utils-interfaces
(5).</para>
</note>
<para>/etc/network/interfaces on the left-hand firewall:</para>
<programlisting>iface br0 inet static
@ -774,7 +780,7 @@ secret /etc/openvpn/bridgekey</programlisting>
post-up /sbin/ip link set eth1 up
post-up /usr/sbin/brctl addif br0 eth1
post-down /usr/sbin/brctl delbr br0
post-down /usr/sbin/openvpn --rmtun tap0
post-down /usr/sbin/openvpn --rmtun --dev tap0
post-down /sbin/ip link set eth1 down </programlisting>
<para>/etc/network/interfaces on the right-hand firewall:</para>
@ -791,7 +797,7 @@ secret /etc/openvpn/bridgekey</programlisting>
post-up /sbin/ip link set eth1 up
post-up /usr/sbin/brctl addif br0 eth1
post-down /usr/sbin/brctl delbr br0
post-down /usr/sbin/openvpn --rmtun tap0
post-down /usr/sbin/openvpn --rmtun --dev tap0
post-down /sbin/ip link set eth1 down </programlisting>
<para>The Shorewall configuration is just a <ulink