Differences
This shows you the differences between two versions of the page.
| Both sides previous revision Previous revision Next revision | Previous revision Next revisionBoth sides next revision | ||
| docs:guide-user:services:vpn:pppossh:client [2023/03/16 12:53] – consolidate variable naming vgaetera | docs:guide-user:services:vpn:pppossh:client [2023/10/29 01:01] – consolidate naming vgaetera | ||
|---|---|---|---|
| Line 23: | Line 23: | ||
| VPN_PORT=" | VPN_PORT=" | ||
| VPN_SERV=" | VPN_SERV=" | ||
| - | VPN_ADDR=" | + | VPN_ADDR=" |
| VPN_USER=" | VPN_USER=" | ||
| </ | </ | ||
| ==== 2. Key management ==== | ==== 2. Key management ==== | ||
| - | Generate and exchange [[docs: | + | Generate and exchange [[docs: |
| Set up key-based authentication. | Set up key-based authentication. | ||
| Line 43: | Line 43: | ||
| # Configure PKI | # Configure PKI | ||
| - | mkdir -p ~root/.ssh | + | mkdir -p /root/.ssh |
| - | cat << EOF >> | + | cat << EOF >> |
| ${VPN_SERV} ${VPN_PUB% *} | ${VPN_SERV} ${VPN_PUB% *} | ||
| + | EOF | ||
| + | cat << EOF >> / | ||
| + | /root/.ssh | ||
| EOF | EOF | ||
| </ | </ | ||
| ==== 3. Firewall ==== | ==== 3. Firewall ==== | ||
| - | Consider VPN network as public. | + | {{section>docs: |
| - | Assign VPN interface to WAN zone to minimize firewall setup. | + | |
| - | + | ||
| - | <code bash> | + | |
| - | # Configure | + | |
| - | uci rename firewall.@zone[0]=" | + | |
| - | uci rename firewall.@zone[1]=" | + | |
| - | uci del_list firewall.wan.network=" | + | |
| - | uci add_list firewall.wan.network=" | + | |
| - | uci commit firewall | + | |
| - | / | + | |
| - | </ | + | |
| ==== 4. Network ==== | ==== 4. Network ==== | ||
| Line 79: | Line 71: | ||
| uci set network.${VPN_IF}.ipv6=" | uci set network.${VPN_IF}.ipv6=" | ||
| uci commit network | uci commit network | ||
| - | / | + | service |
| </ | </ | ||
| Line 92: | Line 84: | ||
| <code bash> | <code bash> | ||
| # Restart services | # Restart services | ||
| - | / | + | service |
| # Log and status | # Log and status | ||