From 9e6fd391456ba522f09e6195a6beb5c9d6c76049 Mon Sep 17 00:00:00 2001 From: Tom Eastep Date: Sat, 30 Jul 2011 06:57:55 -0700 Subject: [PATCH] Corrections to OPENVPN doc. Signed-off-by: Tom Eastep --- docs/OPENVPN.xml | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) diff --git a/docs/OPENVPN.xml b/docs/OPENVPN.xml index ea155a297..cb3a843e4 100644 --- a/docs/OPENVPN.xml +++ b/docs/OPENVPN.xml @@ -760,6 +760,12 @@ secret /etc/openvpn/bridgekey /etc/network/interfaces (Debian and derivatives) will create the bridged interfaces. + + The stanzas below were written before bridges could be defined in + /etc/network/interfaces. For current usage, see bridge-utils-interfaces + (5). + + /etc/network/interfaces on the left-hand firewall: iface br0 inet static @@ -774,7 +780,7 @@ secret /etc/openvpn/bridgekey post-up /sbin/ip link set eth1 up post-up /usr/sbin/brctl addif br0 eth1 post-down /usr/sbin/brctl delbr br0 - post-down /usr/sbin/openvpn --rmtun tap0 + post-down /usr/sbin/openvpn --rmtun --dev tap0 post-down /sbin/ip link set eth1 down /etc/network/interfaces on the right-hand firewall: @@ -791,7 +797,7 @@ secret /etc/openvpn/bridgekey post-up /sbin/ip link set eth1 up post-up /usr/sbin/brctl addif br0 eth1 post-down /usr/sbin/brctl delbr br0 - post-down /usr/sbin/openvpn --rmtun tap0 + post-down /usr/sbin/openvpn --rmtun --dev tap0 post-down /sbin/ip link set eth1 down The Shorewall configuration is just a