Server side
debian
/etc/network/interfaces
# This file describes the network interfaces available on your system
# and how to activate them. For more information, see interfaces(5).
source /etc/network/interfaces.d/*
# The loopback network interface
auto lo
iface lo inet loopback
# The primary network interface
allow-hotplug eth0
####################################### vlans
# Management
#Vlan 1 sur eth0
auto eth0.1
iface eth0.1 inet manual
up ip link set dev eth0.1 up
up ip link set dev eth0.1 promisc on
down ip link set dev eth0.1 promisc off
# ADSL_DSI
#vlan 294 sur eth0
auto eth0.294
iface eth0.294 inet static
address 192.168.1.220/24
gateway 192.168.1.1
dns-nameservers 192.168.1.1
# Epstien_data
#vlan 329 sur eth0
auto eth0.329
iface eth0.329 inet manual
up ip link set dev eth0.329 up
up ip link set dev eth0.329 promisc on
down ip link set dev eth0.329 promisc off
# OTSI_Data
#vlan 333 sur eth0
auto eth0.333
iface eth0.333 inet manual
up ip link set dev eth0.333 up
up ip link set dev eth0.333 promisc on
down ip link set dev eth0.333 promisc off
# Epstein_ToIP
#vlan 429 sur eth0
auto eth0.429
iface eth0.329 inet manual
up ip link set dev eth0.429 up
up ip link set dev eth0.429 promisc on
down ip link set dev eth0.429 promisc off
# OTSI_ToIP
#vlan 433 sur eth0
auto eth0.433
iface eth0.433 inet manual
up ip link set dev eth0.433 up
up ip link set dev eth0.433 promisc on
down ip link set dev eth0.433 promisc off
####################################### tap
Allow-hotplug tap1
auto tap1
iface tap1 inet manual
pre-up openvpn --mktun --dev tap1
up ip link set dev tap1 up
up ip link set dev tap1 promisc on
down ip link set dev tap1 promisc off
post down ip link del dev tap1
Allow-hotplug tap333
auto tap333
iface tap333 inet manual
pre-up openvpn --mktun --dev tap333
up ip link set dev tap333 up
up ip link set dev tap333 promisc on
down ip link set dev tap333 promisc off
post down ip link del dev tap333
Allow-hotplug tap329
auto tap329
iface tap329 inet manual
pre-up openvpn --mktun --dev tap329
up ip link set dev tap329 up
up ip link set dev tap329 promisc on
down ip link set dev tap329 promisc off
post down ip link del dev tap329
Allow-hotplug tap429
auto tap429
iface tap429 inet manual
pre-up openvpn --mktun --dev tap429
up ip link set dev tap429 up
up ip link set dev tap429 promisc on
down ip link set dev tap429 promisc off
post down ip link del dev tap429
Allow-hotplug tap433
auto tap433
iface tap433 inet manual
pre-up openvpn --mktun --dev tap433
up ip link set dev tap433 up
up ip link set dev tap433 promisc on
down ip link set dev tap433 promisc off
post down ip link del dev tap433
####################################### br
auto br1
iface br1 inet manual
bridge_ports eth0.1 tap1
auto br333
iface br333 inet manual
bridge_ports eth0.333 tap333
auto br329
iface br329 inet manual
bridge_ports eth0.329 tap329
auto br433
iface br433 inet manual
bridge_ports eth0.433 tap433
auto br429
iface br429 inet manual
bridge_ports eth0.429 tap429
/etc/openvpn/vlan1_port1194.conf
port 1194
proto udp
dev tap1
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh4096.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
compress lz4-v2
push "compress lz4-v2"
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
/etc/openvpn/vlan329_port1195.conf
port 1195
proto udp
dev tap329
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh4096.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
compress lz4-v2
push "compress lz4-v2"
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
/etc/openvpn/vlan333_port1196.conf
port 1196
proto udp
dev tap333
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh4096.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
compress lz4-v2
push "compress lz4-v2"
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
/etc/openvpn/vlan429_port1197.conf
port 1197
proto udp
dev tap429
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh4096.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
compress lz4-v2
push "compress lz4-v2"
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
/etc/openvpn/vlan433_port1198.conf
port 1198
proto udp
dev tap433
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh4096.pem
server 10.8.0.0 255.255.255.0
push "redirect-gateway def1 bypass-dhcp"
client-to-client
duplicate-cn
keepalive 10 120
tls-auth /etc/openvpn/server/ta.key 0 # This file is secret
cipher AES-256-CBC
compress lz4-v2
push "compress lz4-v2"
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
