Subject: Re: [vserver] OpenVPN Interface
From: Herbert Poetzl <herbert@13thfloor.at>
Date: Wed, 24 Nov 2010 11:24:49 +0100

On Wed, Nov 24, 2010 at 09:07:23AM +0000, Gordan Bobic wrote:
> Herbert Poetzl wrote:
> >On Tue, Nov 23, 2010 at 05:22:54PM +0000, Gordan Bobic wrote:
> >>On 11/23/2010 04:50 PM, Daniel Hokka Zakrisson wrote:
> >>>Gordan Bobic wrote:
> >>>>Hi,

> >>>>I'm trying to get an OpenVPN server running in a guest and I have
> >>>>a peculiar problem. I cannot seem to manually create an OpenVPN
> >>>>interface exactly the same as what is created by:

> >>>># openvpn --mktun --dev tun0
> >>>>TUN/TAP device tun0 opened
> >>>>Persist state set to: ON

> >>>># ip link
> >>>>77: tun0:<POINTOPOINT,MULTICAST,NOARP>  mtu 1500 qdisc noop state DOWN
> >>>>qlen 100
> >>>>     link/[65534]

> >>>>How can a device with link type [65534] be created using the ip
> >>>>commands? The closest I could come up with is something like:
> >>>># ip tunnel add tun0 mode ipip local 192.168.0.1 remote 192.168.0.2
> >>>># ip link set tun0 mtu 1500
> >>>># ip addr add dev tun0 local 192.168.0.1 peer 192.168.0.2

> >>>If this is for a guest, why don't you just set
> >>>/etc/vservers/<guest>/interfaces/<x>/tun?

> >>How do I tell it there to set it up as a pointopoint link?

> >/etc/vservers/PTPTUN/interfaces/tun/
> >dev	:	tun0     
> >ip      :	10.0.0.1
> >peer    :	10.0.0.2
> >prefix  :	24
> >tun     

> Another question - how do I add the routes that depend on this 
> interface? 

> Is there a standard configuration method for adding routes 
> dependent on a guest-specific interface?

add them in the pre-start script and remove them in the
post-stop script (see 'flower page' for details)

best,
Herbert

> Gordan