ThinkCore W311/321/341 Linux User’s Manual Managing Communications

4-32

2. The configuration procedure is almost the same as for the previous example. The only

difference is that you will need to comment out the parameter “up” in

“/etc/openvpn/A-tap0-br.conf” and “/etc/openvpn/B-tap0-br.conf”.

Setup 3: Routed IP

1. Set up four machines as shown in the following diagram:

OpenVPN A
OpenVPN B
Host A
LAN1: 192.168.2.171
Host B
LAN1: 192.168.4.172
LAN1: 192.168.8.174
LAN1: 192.168.2.173
local net
local net
InternetInternet
LAN2: 192.168.4.174
LAN2: 192.168.8.173

2. Create a configuration file named “A-tun.conf” and an executable script file named

“A-tun.sh”.

# point to the peer
remote 192.168.8.174
dev tun
secret /etc/openvpn/secrouter.key
cipher DES-EDE3-CBC
auth MD5
tun-mtu 1500
tun-mtu-extra 64
ping 40
ifconfig 192.168.2.173 192.168.4.174
up /etc/openvpn/A-tun.sh
#--------------------------------- Start-----------------------------
#!/bin/sh
# value after “-net” is the subnet behind the remote peer
route add -net 192.168.4.0 netmask 255.255.255.0 gw $5
#--------------------------------- end ------------------------------

Create a configuration file named B-tun.conf and an executable script file named B-tun.sh on

OpenVPN B:

remote 192.168.8.173
dev tun
secret /etc/openvpn/secrouter.key
cipher DES-EDE3-CBC
auth MD5
tun-mtu 1500
tun-mtu-extra 64
ping 40
ifconfig 192.168.4.174 192.168.2.173
up /etc/openvpn/B-tun.sh
#--------------------------------- Start----------------------------
#!/bin/sh