1
mirror of https://git.dn42.dev/wiki/wiki.git synced 2025-03-17 12:39:07 +01:00

89 lines
2.6 KiB
Markdown
Raw Normal View History

2015-02-11 10:02:03 +00:00
# Example Configuration for direct peer to peer
2015-02-11 10:01:34 +00:00
* Replace `<PEER_NAME>` with a self chosen name to identify this peer
* Replace `<PROTO>` with either `udp` or `udp6`, depending if you reach your remote peer with ipv4 o ipv6
* Replace `<REMOTE_HOST>` with the public ip address of your peer
* Replace `<REMOTE_PORT>` with the port number, where your peer's openvpn daemon listen for traffic
* Replace `<LOCAL_HOST>` with your public ip
* Replace `<INTERFACE_NAME>` with a self chosen name, this will be the name of your network interface (tun device) for this peering
* Replace `<LOCAL_GATEWAY_IP>` with your own dn42 ip address
* Replace `<REMOTE_GATEWAY_IP>` with dn42 ip address of your peer
2015-02-11 10:01:00 +00:00
```
#/etc/openvpn/<PEER_NAME>
daemon
proto <PROTO>
mode p2p
remote <REMOTE_HOST>
rport <REMOTE_PORT>
local <LOCAL_HOST>
lport <LOCAL_PORT>
dev-type tun
dev <INTERFACE_NAME>
comp-lzo
persist-key
persist-tun
ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP>
secret /etc/openvpn/<PEER_NAME>.key
```
then create a new key and share it with your peer
```
$ openvpn --genkey --secret /etc/openvpn/<PEER_NAME>.key
2015-02-11 10:26:49 +00:00
```
2015-02-11 10:27:54 +00:00
# Example Configuration if one peer has a floating ip
2015-02-11 10:26:49 +00:00
## peer with fixed ip
```
daemon
proto <PROTO>
mode p2p
dev-type tun
comp-lzo
dev <INTERFACE_NAME>
persist-key
persist-tun
float
port <LOCAL_PORT>
ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP>
secret /etc/openvpn/<PEER_NAME>.key
```
## peer with floating ip
* Notice the local gateway ip of your peer is your remote gateway ip and
his remote gateway is your local gateway
* `<REMOTE_HOST>` is the ip address of your peer
* `<REMOTE_PORT>` is openvpn port, where your peer listen for traffic
```
daemon
proto <PROTO>
mode p2p
remote <REMOTE_HOST>
rport <REMOTE_PORT>
lport float
dev-type tun
dev <INTERFACE_NAME>
comp-lzo
persist-key
persist-tun
ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP>
secret /etc/openvpn/<PEER_NAME>.key
2015-02-23 12:03:12 +00:00
```
# External Links
* multicast:
* **OpenVPN**
* [Optimizations for multicast over TAP w/ OpenVPN](https://community.openvpn.net/openvpn/ticket/79)
* [Sending multicast over a openvpn tunnel](http://forums.openvpn.net/topic8036.html)
* **RFC**
* [IPv6 - RFC3306](https://tools.ietf.org/html/rfc3306)
* [IPv4 - multicast](https://en.wikipedia.org/wiki/Multicast_address#GLOP_addressing)
* [IPv4 - GLOB calculator](http://labs.spritelink.net/glop)
* [RFC3108 GLOP Addressing in 233/8](http://tools.ietf.org/html/rfc3180)
* [RFC3138 Extended Assignments in 233/8](https://tools.ietf.org/html/rfc3138)