After some hours on the web,
I try to make my vpn server
who ask to my isc-dhcp-server the new addresse
for the new vpn client....
I use isc-dhcp-server <=>Bind; For prepare
to use IpV6, that will be really necessary.
But unfortunaly, I can bridge no souci,
I can connect, Yes I can pass the dhcp tooo....
but, sadly, after an manual connexion,
I have to make on client side :
sudo dhclient tap0
My server config :
#float
port 1194
proto udp
#dev tun0
dev tap0
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
mode server
tls-server
tun-mtu 1500
tun-mtu-extra 32
mssfix 1450
push "route-gateway dhcp"
#push "redirect-gateway def1 bypass-dhcp"
#client-config-dir /etc/openvpn/ccd-bridged
#ifconfig-pool-persist ipp.txt
route-gateway dhcp
server-bridge nogw
#push "redirect-gateway def1 bypass-dhcp"
#push "dhcp-option DNS 10.192.90.1"
#push "route 192.168.1.0 255.255.255.0"
resolv-retry infinite
mute-replay-warnings
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
#mute 10
push "explicit-exit-notify 3"
My client config :
client
remote 192.168.1.73
ca /home/chapuis/openvpn/ca.crt
cert /home/chapuis/openvpn/client_nico.crt
key /home/chapuis/openvpn/client_nico.key
comp-lzo yes
dev tap
proto udp
remote-cert-tls server
nobind
auth-nocache
script-security 2
persist-key
persist-tun
user nobody
group nogroup
passtos
server interface :
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
auto eth0
allow-hotplug eth0
iface eth0 inet manual
auto eth1
allow-hotplug eth1
iface eth1 inet manual
auto eth2
allow-hotplug eth2
iface eth2 inet manual
auto br0
allow-hotplug br0
iface br0 inet dhcp
bridge_ports eth0 eth2
post-up /etc/iptables/init_gw start $IFACE
post-down /etc/iptables/init_gw stop $IFACE
auto xenbr0
allow-hotplug xenbr0
iface xenbr0 inet static
address 10.192.90.1
netmask 255.255.255.0
gateway 10.192.90.1
bridge_ports eth1 tap0
# bridge_ports eth1 tap0
# pre-up openvpn --mktun --dev tap0
# post-down openvpn --rmtun --dev tap0
# post-up /etc/iptables/init start $IFACE
# post-down /etc/iptables/init stop $IFACE
auto tap0
iface tap0 inet static
address 10.192.90.2
netmask 255.255.255.0
gateway 10.192.90.1
# bridge_ports eth1
pre-up openvpn --mktun --dev tap0
post-down openvpn --rmtun --dev tap0
if someone have one idea, I take him...
thanks a lots.
