User`s manual

UC-7408 User’s Manual Managing Communication
4-22
2. Generate a preset shared key by typing the command:
# openvpn --genkey --secret secrouter.key
Copy the file that is generated to the OpenVPN machine.
3. Generate a script file named openvpn-bridge on each OpenVPN machine. This script
reconfigures interface “ixp1” as IP-less, creates logical bridge(s) and TAP interfaces, loads
modules, enables IP forwarding, etc.
#---------------------------------Start-----------------------------
#!/bin/sh
iface=ixp1 # defines the internal interface
maxtap=`expr 1` # defines the number of tap devices. I.e., # of tunnels
IPADDR=
NETMASK=
BROADCAST=
# it is not a great idea but this system doesn’t support
# /etc/sysconfig/network-scripts/ifcfg-ixp1
ifcfg_vpn()
{
while read f1 f2 f3 f4 r3
do
if [ “$f1” = “iface” -a “$f2” = “$iface” -a “$f3” = “inet” -a “$f4” = “static” ];then
i=`expr 0`
while :
do
if [ $i -gt 5 ]; then
break
fi
i=`expr $i + 1`
read f1 f2
case “$f1” in
address ) IPADDR=$f2
;;
netmask ) NETMASK=$f2
;;
broadcast ) BROADCAST=$f2
;;
esac
done
break
fi
done < /etc/network/interfaces
}
# get the ip address of the specified interface
mname=
module_up()
{
oIFS=$IFS
IFS=‘
‘
FOUND=“no”
for LINE in `lsmod`
do
TOK=`echo $LINE | cut -d’ ‘ -f1`
if [ “$TOK” = “$mname” ]; then
FOUND=“yes”;
break;
fi
done
IFS=$oIFS