diff options
| -rw-r--r-- | content/posts/openbsd-vpn-gateway/index.org | 17 |
1 files changed, 10 insertions, 7 deletions
diff --git a/content/posts/openbsd-vpn-gateway/index.org b/content/posts/openbsd-vpn-gateway/index.org index 5fc0ba0..ce96625 100644 --- a/content/posts/openbsd-vpn-gateway/index.org +++ b/content/posts/openbsd-vpn-gateway/index.org @@ -64,23 +64,26 @@ simple and straight forward. You can pick up the disk =.iso= image or USB =.fs= image from the [[https://www.openbsd.org/faq/faq4.html#Download][download]] page on OpenBSD website. If this is your first time installing OpenBSD, you should check out the - [[https://www.openbsd.org/faq/faq4.html#Download][ installation guide]], which goes over the process in detail. You may + [[https://www.openbsd.org/faq/faq4.html][installation guide]], which goes over the process in detail. You may also want to consider checking out my [[{{< ref openbsd-introduction-talk >}}][Introduction to OpenBSD]] talk. * Configuring a Static IP - The most important thing is to set a static IP, so it can be set as - the gateway for client machines. We'll set this first. + It's very important to set a static IP on our VPN gateway. We do + this so we always know where to find it on the network. We'll do + this first. Setting a static IP in OpenBSD couldn't be simpler. For each interface on the machine, you can create a [[http://man.openbsd.org/man5/hostname.if.5][=hostname.if(5)=]] file with the name =/etc/hostname.<if>=, where =<if>= is the name of the interface. Since we want to set a configure the interface =vio0=, the file we want is =/etc/hostname.vio0=. If your box was configured - with DHCP, the file might contain =dhcp=. We want to give the - interface the static IP =192.168.0.11= with a =/24= subnet. We use - [[https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing][CIDR notation]] here for convenience. We open the file and replace its - contents with the following. + with DHCP, the file might contain a single line saying =dhcp=. We + want to give the interface the static IP =192.168.0.11= with a =/24= + subnet. We use [[https://en.wikipedia.org/wiki/Classless_Inter-Domain_Routing][CIDR notation]] here for convenience, but it's also + possible to write out the full subnet mask after our IP, separated + by a space. We open the file and replace its contents with the + following. #+BEGIN_SRC inet 192.168.0.11/24 |