Project

General

Profile

Bug #69

OpenVPN 'local' directive

Added by Chris Buechler almost 10 years ago. Updated over 9 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
VPN
Target version:
Start date:
08/31/2009
Due date:
% Done:

100%

Estimated time:
Affected Version:
2.0
Affected Architecture:

Description

The OpenVPN local directive is forced to be specified (by the interface drop down), forcing the OpenVPN server to use a specific IP address. That's usually desirable, but:

1) Need to list CARP and IP Alias type VIPs
2) Need an "any" option there to allow listening on all IPs, which is our current behavior, and needed in some circumstances.

Associated revisions

Revision 3d06e8f0 (diff)
Added by Pierre POMES over 9 years ago

Add carp support for OpenVPN. Ticket #69

Revision 507af8dd (diff)
Added by Pierre POMES over 9 years ago

Use get_interface_ip instead of a manual shell_exec(ifconfig). Ticket #69

Revision fc2c3e34 (diff)
Added by Sjon Hortensius over 4 years ago

correct several typos, remove whitespace from pre

refs #69

Revision a02e2774 (diff)
Added by Sjon Hortensius over 4 years ago

Properly convert select > radios

refs #69

Revision 17be9d34 (diff)
Added by Sjon Hortensius over 4 years ago

use proper variable to detect state

refs #69

History

#1 Updated by Pierre POMES over 9 years ago

I take this one.

#2 Updated by Scott Ullrich over 9 years ago

  • Assignee set to Pierre POMES

#3 Updated by Scott Ullrich over 9 years ago

  • % Done changed from 0 to 50

#4 Updated by Scott Ullrich over 9 years ago

  • % Done changed from 50 to 30

#5 Updated by Pierre POMES over 9 years ago

  • Status changed from New to Feedback
  • % Done changed from 30 to 100

#6 Updated by Pierre POMES over 9 years ago

  • Status changed from Feedback to Assigned
  • % Done changed from 100 to 90

Advice from Ermal:

Please use get_interface_ip() for friendly interfaces
and find_interface_ip() for real interfaces.

Do not roll your own as in:
312

313    // Get ip address for the requested interface
314    $lines = explode(' ', trim(shell_exec("ifconfig {$iface} | grep inet | grep -v inet6")));
315    $iface_ip = $lines[1];

Ticket reopened.

#7 Updated by Pierre POMES over 9 years ago

  • Status changed from Assigned to Feedback
  • % Done changed from 90 to 100

/etc/inc/openvpn.inc now used get_interface_ip() when generating config file.

#8 Updated by Chris Buechler over 9 years ago

  • Status changed from Feedback to Resolved

Also available in: Atom PDF