Re: [Cerowrt-devel] vpn fw question

["Joel Wirāmu Pauling" <joel@aenertia.net>]

I.e Your topology looks like this :

[(Remote LAN) - VPN Client]---[INTERNET]---(Local LAN)[WAN][LAN][REMOTE-LAN])

Your Local LAN knows nothing about Remote LAN and Vice versa. There is
just a single Inteface/Client member that is a member of REMOTE-LAN.
So to get traffic from Local LAN to Remote LAN all Local-LAN traffic
needs to be masqueraded to that Single interface.


-Joel



On 3 October 2014 14:32, Eric S. Johansson <esj@eggo.org> wrote:
> I was trying to setup my cerowrt box as an openvpn client. everything seems
> to be working. The VPN link comes up, tun0 is created. I can access machines
> on the far end of the link from the AP and vice versa. the openwrt
> incantation for the vpn says to create an interface called vpn0
>
> network.vpn0=interface
> network.vpn0.proto=none
> network.vpn0.ifname=tun0
>
> ifconfig says  tun0 exists  but no vpn0. fw3 reload says:
>
> Warning: Section @zone[1] (lan) cannot resolve device of network 'lan'
> Warning: Section @zone[2] (guest) cannot resolve device of network 'guest'
>
> sometimes it says: Warning: Section @zone[1] (lan) cannot resolve device of
> network 'vpn0'
>
> tcpdump sees the ICMP request at se00 and tun0 but not at the remote target.
> this leads me to believe that it's probably a firewall problem but I don't
> know where the logs are.
>
> This brings me to one of the problem with had making changes in cerowrt,
> namely, how the $##$& do you debug this thing? I've had to reflash this box
> way too many times because I did something that effectively bricked it.
> right now, I would settle for knowing where to find where logs are put.
>
> thanks
> --- eric
>
>
>
>
>
>
> _______________________________________________
> Cerowrt-devel mailing list
> Cerowrt-devel@lists.bufferbloat.net
> https://lists.bufferbloat.net/listinfo/cerowrt-devel