Page MenuHomeVyOS Platform

OpenVPN - mode server-bridge interfaces TAP
Closed, ResolvedPublicFEATURE REQUEST

Description

based in official documentation , OpenVPN add a new mode how to created bridge interface ( TAP- to Layer2 frames). this requirement involved in change the structure and logic in our cli

--server-bridge args
	

A helper directive similar to --server which is designed to simplify the configuration of OpenVPN's server mode in Ethernet bridging configurations.

valid syntax in openvpn :

server-bridge gateway netmask pool-start-IP pool-end-IP
server-bridge [nogw]

version :

sudo dpkg -l | grep openvpn
ii  openvpn                              2.6.3-1+deb12u2                  amd64        virtual private network daemon
ii  openvpn-auth-ldap                    2.0.4-3                          amd64        OpenVPN LDAP authentication module
ii  openvpn-auth-radius                  2.1-8                            amd64        OpenVPN RADIUS authentication module
ii  openvpn-dco                          0.2.20231117                     amd64        OpenVPN Data Channel Offload
ii  openvpn-otp                          1.0-4-g47f8ccf                   amd64        OpenVPN OTP Authentication support.

https://openvpn.net/community-resources/reference-manual-for-openvpn-2-6/

Details

Version
-
Is it a breaking change?
Behavior change
Issue type
Feature (new functionality)

Related Objects

Mentioned In
rVYOSONEX6c467b1fdc9d: Merge pull request #4063 from Crushable1278/T6555-openvpn-fix-server-bridge…
rVYOSONEX30159928aeb0: T6555: openvpn: fix inclusion of data-ciphers for server bridge smoketest
rVYOSONEXdc1da7cbd594: Merge pull request #4037 from vyos/mergify/bp/sagitta/pr-3920
rVYOSONEX8461eea6c964: OPENVPN: T6555: fix name to bridge
rVYOSONEXd49a39fe84ab: OPENVPN: T6555: fix name to bridge
rVYOSONEX7c4932e5099b: OPENVPN: T6555: fix name to bridge
rVYOSONEX06050d7a668b: OPENVPN: T6555: fix name to bridge
rVYOSONEX62f5bc773ac0: OPENVPN: T6555: add server-bridge options in mode server
rVYOSONEX01da8d9cd91b: smoketest: T6555: openvpn: NameError: name 'elf' is not defined
rVYOSONEXa075d17b3716: smoketest: T6555: openvpn: SyntaxError: '(' was never closed
rVYOSONEX260f6d9365b4: Merge pull request #3943 from vyos/mergify/bp/circinus/pr-3920
rVYOSONEX877fcadbe5ab: OPENVPN: T6555: fix missing 's'
rVYOSONEX9bd2c196fe23: smoketest: T6555: openvpn: NameError: name 'elf' is not defined
rVYOSONEXcc0f5bd15f8b: Merge pull request #3947 from c-po/openvpn-T6555
rVYOSONEX48c4e500a145: OPENVPN: T6555: fix name to bridge
rVYOSONEXbc2bb1ed9ac9: OPENVPN: T6555: add server-bridge options in mode server
rVYOSONEXf94d7f081074: OPENVPN: T6555: fix name to bridge
rVYOSONEX2fd817e51532: smoketest: T6555: openvpn: SyntaxError: '(' was never closed
rVYOSONEX7306a7feac60: Merge pull request #3942 from c-po/bugfixes
rVYOSONEXaa842a640cbe: Merge pull request #3920 from fett0/T6555
rVYOSONEX4acad3eb8d9b: OPENVPN: T6555: add server-bridge options in mode server
rVYOSONEXd5ae708581d4: OPENVPN: T6555: fix name to bridge
rVYOSONEX0162a27952d2: OPENVPN: T6555: fix name to bridge
Mentioned Here
T4025: OpenVPN server with TAP interface, client didn’t see network

Event Timeline

Viacheslav triaged this task as Normal priority.Jul 4 2024, 1:37 PM
fernando changed the task status from Open to Confirmed.Jul 4 2024, 2:35 PM
fernando changed the task status from Confirmed to In progress.Jul 31 2024, 7:24 PM

new structure was added :

set interfaces openvpn vtun10 mode 'server'
set interfaces openvpn vtun10 server bridge gateway '10.10.0.1'
set interfaces openvpn vtun10 server bridge start '10.10.0.100'
set interfaces openvpn vtun10 server bridge stop '10.10.0.200'
set interfaces openvpn vtun10 server bridge subnet-mask '255.255.255.0'
Viacheslav changed the task status from In progress to Needs testing.Aug 9 2024, 9:20 AM

merge and tested in both version .