Re: [PLUG] openvpn on fc12

On Sun, Jan 17, 2010 at 9:24 PM, Ben Love <blove+plug@kylimar.com> wrote:

> so add
>
> # openvpn --mktun --dev tun
>
> to the client config?

No, you run that as root ahead of time to create a persistent tun
device.

You should see something like this:

[J:0-H:3888-L:3] # openvpn --mktun --dev tun
Sun Jan 17 21:18:07 2010 TUN/TAP device tun2 opened
Sun Jan 17 21:18:07 2010 Persist state set to: ON

And to remove:

[J:0-H:3889-L:3] # openvpn --rmtun --dev tun2
Sun Jan 17 21:18:34 2010 TUN/TAP device tun2 opened
Sun Jan 17 21:18:34 2010 Persist state set to: OFF

Once you have a persistent device, you can just tell the client config
to use that specific device instead of creating a new tun device on the
fly. It's sub-optimal because you have extraneous devices floating
around that you may not want/need when openvpn is not running.

-------

How are you invoking openvpn? Are you using some sort of init.d script
with start-stop-daemon or the equivalent? Are you simply using openvpn
--config client.conf?

Ben

--
Ben Love
blove+signature (at) kylimar.com || ASCII ribbon campaign - ()
http://www.kylimar.com/ || against HTML e-mail - /\

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.6 (GNU/Linux)
Comment: http://www.kylimar.com/cryptograpy/keys/blove.public.asc
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=9/gb
-----END PGP SIGNATURE-----

___________________________________________________________________________
Philadelphia Linux Users Group -- http://www.phillylinux.org
Announcements - http://lists.phillylinux.org/mailman/listinfo/plug-announce
General Discussion -- http://lists.phillylinux.org/mailman/listinfo/plug