Page MenuHomeVyOS Platform

OpenVPN - mode server-bridge interfaces TAP
Needs testing, NormalPublicFEATURE REQUEST

Description

based in official documentation , OpenVPN add a new mode how to created bridge interface ( TAP- to Layer2 frames). this requirement involved in change the structure and logic in our cli

--server-bridge args
	

A helper directive similar to --server which is designed to simplify the configuration of OpenVPN's server mode in Ethernet bridging configurations.

valid syntax in openvpn :

server-bridge gateway netmask pool-start-IP pool-end-IP
server-bridge [nogw]

version :

sudo dpkg -l | grep openvpn
ii  openvpn                              2.6.3-1+deb12u2                  amd64        virtual private network daemon
ii  openvpn-auth-ldap                    2.0.4-3                          amd64        OpenVPN LDAP authentication module
ii  openvpn-auth-radius                  2.1-8                            amd64        OpenVPN RADIUS authentication module
ii  openvpn-dco                          0.2.20231117                     amd64        OpenVPN Data Channel Offload
ii  openvpn-otp                          1.0-4-g47f8ccf                   amd64        OpenVPN OTP Authentication support.

https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/

Details

Difficulty level
Unknown (require assessment)
Version
-
Why the issue appeared?
Will be filled on close
Is it a breaking change?
Behavior change
Issue type
Feature (new functionality)

Event Timeline

Viacheslav triaged this task as Normal priority.Jul 4 2024, 1:37 PM
fernando changed the task status from Open to Confirmed.Jul 4 2024, 2:35 PM
fernando changed the task status from Confirmed to In progress.Jul 31 2024, 7:24 PM

new structure was added :

set interfaces openvpn vtun10 mode 'server'
set interfaces openvpn vtun10 server bridge gateway '10.10.0.1'
set interfaces openvpn vtun10 server bridge start '10.10.0.100'
set interfaces openvpn vtun10 server bridge stop '10.10.0.200'
set interfaces openvpn vtun10 server bridge subnet-mask '255.255.255.0'
Viacheslav changed the task status from In progress to Needs testing.Fri, Aug 9, 9:20 AM