openwrt como cliente openvpn

eduardo

28 Jul 2012

ip route add 10.0.70.0/24 dev br-lan_vpn table vpn
ip rule add from 10.0.70.0/24 table vpn
ip route add default dev tun0 table vpn
ip route flush cache

pacotes a instalar:
openvpn
luci-app-openvpn
iptables-mod-ipopt (para poder marcar os pacotes no iptables - se calhar não é necesário)

net.ipv4.icmp_errors_use_inbound_ifaddr=1 - em /etc/sysctl.conf,

the message will be sent with the primary address of the
interface that received the packet that caused the ICMP error. This is
the behavior that many network administrators will expect from a
router. And it can make debugging complicated network layouts much
easier.

rede (switch):

wan - vlan 2 - [1U cpuT]

lan - vlan1 - [2U 3U cpuT]

vpn - vlan3 - [4U 5U cpuT]

rede (interfaces):

wan - eth0.2

lan - br [vlan1 OpenWrt]

vpn - br [vlan3 OpenWrt_vpn]

http://lgallardo.com/en/2011/05/22/instalacion-de-openwrt-en-tp-link-tl…

http://lgallardo.com/en/2011/09/08/configurar-openvpn-en-openwrt/

http://wiki.openwrt.org/doc/howto/notuci.config

http://blog.philippklaus.de/2011/04/openwrt-on-a-tp-link-tl-wr1043nd-gi…