Dieses Wiki ist ein Archiv bis 2023. Das aktuelle Wiki findet sich unter https://wiki.hamburg.ccc.de/

Difference between revisions of "ChaosVPN:OpenWRTHowto"

From CCCHHWiki
Jump to: navigation, search
m (3. Start and Setup OpenWRT)
m (Zwischenspeicherung)
Line 1: Line 1:
 
This is Howto for setting up an independent Box providing you with [[ChaosVPN]]
 
This is Howto for setting up an independent Box providing you with [[ChaosVPN]]
  
In five steps. Really.
+
 
  
 
= 0. Fulfil Requirements =
 
= 0. Fulfil Requirements =
Line 8: Line 8:
 
* generate your keys, choose nodename and subnet and send pubkey to ChaosVPN team
 
* generate your keys, choose nodename and subnet and send pubkey to ChaosVPN team
  
= 1. Get Started =
+
= 1. Preparations =
* Open your Router and power on
+
== 1. Get Started ==
 +
* Unpack your Router and power on
 
* Connect wired or wireless (use information provided with your router)  
 
* Connect wired or wireless (use information provided with your router)  
 
* Go directly to your routers Webinterface (192.168.1.1 or 192.168.178.1) and search for sth like ''System -> Firmware Upgrade''
 
* Go directly to your routers Webinterface (192.168.1.1 or 192.168.178.1) and search for sth like ''System -> Firmware Upgrade''
 
* (There is no need to change any of the configuration)
 
* (There is no need to change any of the configuration)
  
= 2. Install OpenWRT =
+
== 2. Install OpenWRT ==
* Download [[http://downloads.openwrt.org/backfire/10.03.1/ar71xx/openwrt-ar71xx-wndr3800-squashfs-factory.img|OpenWRT for WNDR3800]]
+
* Download [[http://downloads.openwrt.org/backfire/10.03.1/ar71xx/openwrt-ar71xx-wndr3800-squashfs-factory.img| OpenWRT for WNDR3800]] and upload the Image in your Webinterface
* Upload the Image in your Webinterface
 
 
* Press Start  
 
* Press Start  
 
* '''DO NOT REBOOT, POWEROFF OR ELSE'''
 
* '''DO NOT REBOOT, POWEROFF OR ELSE'''
 
* Wait until done (Power LED should not flash)
 
* Wait until done (Power LED should not flash)
  
= 3. Start and Setup OpenWRT =
+
== 3. Start and Setup OpenWRT ==
* Reconnect Network between PC <-> Router
+
* Restart the network connection between PC <-> Router
 
* <pre>telnet 192.168.1.1</pre>
 
* <pre>telnet 192.168.1.1</pre>
 
* <pre>passwd #set a root password </pre>  
 
* <pre>passwd #set a root password </pre>  
Line 35: Line 35:
 
(I did also install ''screen'' at this point)
 
(I did also install ''screen'' at this point)
  
= 4. Prepare for launch =
+
== 4. Prepare for launch ==
 
* <pre>ssh root@192.168.1.1 # telnet won't work anymore</pre>
 
* <pre>ssh root@192.168.1.1 # telnet won't work anymore</pre>
 
* edit the top part of  
 
* edit the top part of  
Line 50: Line 50:
 
</pre>
 
</pre>
  
= 5. Lift off =
+
== 5. Lift off ==
 
* start chaosvpn
 
* start chaosvpn
 
* <pre>/etc/init.de/chaosvpn start</pre>
 
* <pre>/etc/init.de/chaosvpn start</pre>
  
 
...be prepared for 150 new route entries
 
...be prepared for 150 new route entries
 +
 +
= 2. Configure a ChaosVPN-only access node =
 +
  
  
 
... to be continued
 
... to be continued

Revision as of 00:34, 14 April 2012

This is Howto for setting up an independent Box providing you with ChaosVPN


0. Fulfil Requirements

  • Buy Hardware [WNDR3800] or some equivalent
  • You must have read the basic Howto precisely
  • generate your keys, choose nodename and subnet and send pubkey to ChaosVPN team

1. Preparations

1. Get Started

  • Unpack your Router and power on
  • Connect wired or wireless (use information provided with your router)
  • Go directly to your routers Webinterface (192.168.1.1 or 192.168.178.1) and search for sth like System -> Firmware Upgrade
  • (There is no need to change any of the configuration)

2. Install OpenWRT

  • Download [OpenWRT for WNDR3800] and upload the Image in your Webinterface
  • Press Start
  • DO NOT REBOOT, POWEROFF OR ELSE
  • Wait until done (Power LED should not flash)

3. Start and Setup OpenWRT

  • Restart the network connection between PC <-> Router
  • telnet 192.168.1.1
  • passwd #set a root password 
  • REMEMBER IT
  • Connect the yellow (WAN) port on your router to current infrastructure
  • Go to Webinterface at 192.168.1.1
  • Go to Network -> Interfaces and activate WAN Connection with DHCP or your custom internet configuration
  • Navigate to System -> Software and press Update Lists
  • Press Available Software tab and select C
  • Search for ChaosVPN and press install

(I did also install screen at this point)

4. Prepare for launch

  • ssh root@192.168.1.1 # telnet won't work anymore
  • edit the top part of
  • /etc/tinc/chaosvpn.conf
$my_peerid = <nodename>
$my_vpn_ip = 172.31.<your Subnet>.[1-255]
  • Copy over your keys to OpenWRT Box
 
# scp /etc/tinc/chaos/rsa_key.p* root@192.168.1.1:/etc/tinc/chaos
# rm /etc/tinc/chaos/rsa_key.p*

5. Lift off

  • start chaosvpn
  • /etc/init.de/chaosvpn start

...be prepared for 150 new route entries

2. Configure a ChaosVPN-only access node

... to be continued