|
|
(38 intermediate revisions by 2 users not shown) |
Line 1: |
Line 1: |
− | <!--<div style="border:3px solid black; text-align:center; color:red;"><b>THIS DOCUMENTATION IS ONLY PARTIALLY FINISHED FOR CHAOSVPN 2.0!</b></div>-->
| |
| | | |
| | | |
− | ''HowTo on Netbsd 5.2''
| |
| | | |
| | | |
− | [[ChaosVPN:NetBSD 5.2 Howto]] | + | [[ChaosVPN:Netbsd NAT VPN router using chaosvpn and ipnat]] |
| | | |
− | = Install software =
| |
| | | |
− | The following is written assuming a fresh install of NetBSD 5.2 using the GENERIC kernel, with a pkgsrc repository and networking already configured.
| + | [[ChaosVPN:Tims_NetBSD_chaosvpn_rc.d]] |
| | | |
− | == Install necessary programs from pkgsrc ==
| + | [[ChaosVPN:Tims_ipf_conf]] |
| | | |
− | # pkg_add tinc (will add lzo as a dependancy)
| + | [[ChaosVPN:Tims_netbsd_route_hack_attempt]] |
− | # pkg_add zlib
| |
− | # pkg_add bison (will install m4 as a dependancy)
| |
− | # pkg_add flex
| |
− | # pkg_add openssl
| |
| | | |
− | we will also need to install git. Installing git from pkgsrc brings in a long list of other packages (mostly related to Perl) which I list below.
| |
| | | |
− | # pkg_add scmgit
| + | [[ChaosVPN:Tims_random_router_configs]] |
− | | |
− | adds the following packages as dependancies:
| |
− | | |
− | scmgit-base
| |
− | scmgit-docs
| |
− | tcl
| |
− | tk
| |
− | scmgit-gitk
| |
− | perl-5
| |
− | p5-Error
| |
− | p5-MIME-Base64
| |
− | p5-TimeDate
| |
− | p5-MailTools
| |
− | p5-Digest-SHA
| |
− | p5-Digest-MD5
| |
− | p5-Digest-HMAC
| |
− | p5-Net-IP
| |
− | p5-Sockets
| |
− | p5-Net-DNS
| |
− | p5-IO-Socket-INET6
| |
− | p5-Email-Valid
| |
− | p5-Net-LibIDN
| |
− | p5-Net-SSLeay
| |
− | p5-IO-Socket-SSL
| |
− | p5-Net-SMTP
| |
− | p5-GSSAPI
| |
− | p5-Authen-SASL
| |
− | libffi
| |
− | python27
| |
− | curl
| |
− | | |
− | | |
− | URHERE
| |
− | | |
− | == Create config directory ==
| |
− | | |
− | # mkdir -p /etc/tinc/chaos
| |
− | | |
− | == Install our ChaosVPN software ==
| |
− | | |
− | === Compile for yourself from our git repository ===
| |
− | | |
− | Always needed to compile:
| |
− | | |
− | # git clone git://github.com/ryd/chaosvpn.git
| |
− | # cd chaosvpn
| |
− | | |
− | ==== way 1: create a git snapshot debian package ====
| |
− | | |
− | # make deb
| |
− | perhaps it throws an error about missing build dependencies, install these and retry.
| |
− | # sudo dpkg -i ../chaosvpn_2.0*.deb
| |
− | install the generated package file, replace filename above with real name.
| |
− | it is also possible to copy the generated .deb package to a different machine of the same
| |
− | architecture and install it there - no need to have a full compile environment
| |
− | on your router/firewall.
| |
− |
| |
− | ==== way 2: create debian package and install this ====
| |
− | | |
− | # debuild
| |
− | Answer the "This package has a Debian revision number but there does not seem to be
| |
− | an appropriate original tar file or .orig directory in the parent directory" with "y"
| |
− | # sudo dpkg -i ../chaosvpn_2.0*.deb
| |
− | install the generated package file, replace filename above with real name.
| |
− | | |
− | ==== way 3: just compile and install the raw binary ====
| |
− | | |
− | # make
| |
− | # sudo make install
| |
− | | |
− | = Get your new node added to the central configuration =
| |
− | | |
− | {{Template:ChaosVPNMailit}}
| |
− |
| |
− | | |
− | = Customize configfile =
| |
− | | |
− | edit the chaosvpn.conf in /etc/tinc/
| |
− | | |
− | $my_peerid = <nodename>
| |
− |
| |
− | $my_vpn_ip = 172.31.<your Subnet>.[1-255]
| |
− | | |
− | = Enable Starting of ChaosVPN =
| |
− | | |
− | If you installed ChaosVPN through our Debian packages it is not started by default.
| |
− | | |
− | To enable this edit the file /etc/default/chaosvpn and change the RUN= line to RUN="yes"
| |
− | | |
− | After all changes (re-)start the chaosvpn client:
| |
− | | |
− | # /etc/init.d/chaosvpn start
| |
− | | |
− | If you made everything correct there should now be a tinc daemon running, and the output of 'route -n' should show lots of routes pointing to the new 'chaos_vpn' network interface.
| |
− | | |
− | On other systems you have to take a look at our debian/init.d example script and adapt it for your environment.
| |
− | | |
− | = script in /etc/ppp/ip-up to autostart, or to restart from time to time via cron =
| |
− | | |
− | if you built a debian package and installed it the cron and ip-up parts are already setup, if you installed it manually with make install you have to do it yourself.
| |
− | | |
− | | |
− | and with luck, it will function beautifully! ;)
| |
− | | |
− | | |
− | todo:
| |
− | tons ;)
| |
− | test in particular, and adjust docs for other linux distros, and perhaps even with *bsd
| |
− | | |
− | [[Category:ChaosVPN]]
| |