dustin/configpolicy
1
1
Fork 0
Code Issues Releases Activity

dch-openvpn: Support road-warrior clients

Browse Source 
Moving the route definitions to global scope, and defining an address
pool, will allow other clients besides *dhatch-d4b* to connect to and
use the OpenVPN tunnel service. This may be useful in situations where
IPsec is blocked
This commit is contained in:
Dustin
2018-10-07 12:18:33 -05:00
parent a1ca06a3c5
commit b61070fea8
2 changed files with 6 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
roles/dch-openvpn-server/templates/clients/dhatch-d4b.securepassage.com.j2
View File

@@ -2,5 +2,3 @@ ifconfig-push 172.30.0.210 255.255.255.240
{% for net in firemon_networks %}
iroute {{ net|ipaddr('network') }} {{ net|ipaddr('netmask') }}
{% endfor %}
push "route 172.30.0.0 255.255.255.192 172.30.0.209"
push "route 172.31.0.0 255.255.255.224 172.30.0.209"