82cbbdab5439ac36c67846a8cb78007f83ab5fbf
howto/Edgeos-Config-Example-number-2.md
| ... | ... | @@ -1,56 +0,0 @@ |
| 1 | -## EdgeRouterPro-8 DN42 config example with v1.9.0 |
|
| 2 | - |
|
| 3 | -After a lot of searching and trying I [Phil/ALS7] finnaly got a working config |
|
| 4 | - |
|
| 5 | -##Features |
|
| 6 | - |
|
| 7 | -* IPv4/IPv6 Tunnel via OpenVPN |
|
| 8 | -* dn42 DNS |
|
| 9 | - |
|
| 10 | -##How-To |
|
| 11 | - |
|
| 12 | ---> still work in Progress |
|
| 13 | - |
|
| 14 | -1) you need to create all required fields in the registry --> look at [[Getting started]] page. |
|
| 15 | - |
|
| 16 | -The data i used are the following: |
|
| 17 | - |
|
| 18 | -Own ASN: AS4242422684 |
|
| 19 | -Own IPv4: 172.20.4.64/27 |
|
| 20 | -Own IPv6: fd33:ac1d:d1ce::/48 |
|
| 21 | - |
|
| 22 | -2) get a peer --> ask nice @ [[IRC]] |
|
| 23 | - |
|
| 24 | -3) You need following data |
|
| 25 | - |
|
| 26 | ---tunnel options, secret key |
|
| 27 | ---ASN from the peer (in this example i use remote-as XXXXX) |
|
| 28 | ---ip's |
|
| 29 | - |
|
| 30 | -... |
|
| 31 | - |
|
| 32 | - |
|
| 33 | -start a ssh session to your router |
|
| 34 | - |
|
| 35 | -copy vpn key to /config/auth/giveITaName -- Create folder if needed |
|
| 36 | - |
|
| 37 | -configure |
|
| 38 | -set interface openssh vtun0 |
|
| 39 | -set interfaces openvpn vtun0 mode site-to-site |
|
| 40 | -set interfaces openvpn vtun0 local-port 1194 //you get the port from your peer |
|
| 41 | -set interfaces openvpn vtun0 remote-port 1194 //you get the port from your peer |
|
| 42 | -set interfaces openvpn vtun0 local-address 172.20.4.64 //your sife dn42 ip address |
|
| 43 | -set interfaces openvpn vtun0 remote-address X.X.X.X //dn42 link address from your peer |
|
| 44 | -set interfaces openvpn vtun0 remote-host X.X.X.Y //clearnet ip address from your peer |
|
| 45 | -set interfaces openvpn vtun0 shared-secret-key-file /config/auth/giveITaName // your keyfile |
|
| 46 | -set interfaces openvpn vtun0 openvpn-option "--comp-lzo" //if your peer support compression |
|
| 47 | -commit |
|
| 48 | -save |
|
| 49 | - |
|
| 50 | -Now the ipv4 tunnel should be up&running |
|
| 51 | - |
|
| 52 | - |
|
| 53 | - |
|
| 54 | - |
|
| 55 | - |
|
| 56 | - |