This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
technical:openvpn-bridges-prep-coova [2023/10/23 20:18] admin [Test it out] |
technical:openvpn-bridges-prep-coova [2024/01/16 10:46] (current) admin [Test it out] |
||
---|---|---|---|
Line 75: | Line 75: | ||
* Create a file called **/ | * Create a file called **/ | ||
<file bash / | <file bash / | ||
- | HS_WANIF=eth1 # WAN Interface toward the Internet | + | HS_WANIF=eth0 # WAN Interface toward the Internet |
HS_DNS1=4.4.4.4 | HS_DNS1=4.4.4.4 | ||
HS_DNS2=8.8.8.8 | HS_DNS2=8.8.8.8 | ||
- | HS_RADIUS=198.27.111.78 | + | HS_RADIUS=164.160.89.129 |
- | HS_RADIUS2=198.27.111.78 | + | HS_RADIUS2=164.160.89.129 |
HS_RADSECRET=testing123 | HS_RADSECRET=testing123 | ||
HS_UAMSECRET=greatsecret | HS_UAMSECRET=greatsecret | ||
HS_UAMALIASNAME=chilli | HS_UAMALIASNAME=chilli | ||
HS_UAMSERVER=$HS_UAMLISTEN | HS_UAMSERVER=$HS_UAMLISTEN | ||
- | HS_UAMFORMAT=http://198.27.111.78/cake2/rd_cake/dynamic_details/chilli_browser_detect/ | + | HS_UAMFORMAT=https://cloud.radiusdesk.com/cake4/rd_cake/dynamic-details/chilli-browser-detect/ |
HS_UAMHOMEPAGE=http:// | HS_UAMHOMEPAGE=http:// | ||
HS_MODE=hotspot | HS_MODE=hotspot | ||
Line 93: | Line 93: | ||
HS_PROVIDER_LINK=http:// | HS_PROVIDER_LINK=http:// | ||
HS_LOC_NAME=" | HS_LOC_NAME=" | ||
+ | HS_UAMUISSL=on | ||
+ | HS_SSLKEYFILE=/ | ||
+ | HS_SSLCERTFILE=/ | ||
+ | HS_UAMALIASNAME=uam | ||
+ | HS_DNS_DOMAIN=mesh-manager.com | ||
+ | HS_UAMUIPORT=4990 | ||
</ | </ | ||
+ | * Make sure you include the **key.pem** and **cert.pem** in order for SSL to work correct. | ||
+ | * You can use these from the MESHdesk firmware | ||
+ | * https:// | ||
* Create the VLAN config directories | * Create the VLAN config directories | ||
< | < | ||
Line 186: | Line 195: | ||
* Restart CoovaChilli for the latest changes to be effected. | * Restart CoovaChilli for the latest changes to be effected. | ||
<code bash> | <code bash> | ||
+ | #This is required | ||
+ | systemctl disable chilli | ||
+ | #Now issue the following | ||
sudo systemctl stop chilli | sudo systemctl stop chilli | ||
sudo systemctl status chilli | sudo systemctl status chilli | ||
Line 242: | Line 254: | ||
</ | </ | ||
* Reboot the system and make sure everything is up and running after the reboot. | * Reboot the system and make sure everything is up and running after the reboot. | ||
+ | |||
+ | ===== System Checks ===== | ||
+ | * To confirm the bridges are up along with the OpenVPN tunnels | ||
+ | <code bash> | ||
+ | root@localhost:/ | ||
+ | bridge name bridge id STP enabled interfaces | ||
+ | br0.101 8000.002222ffffff no eth1.101 | ||
+ | tap0 | ||
+ | br0.102 8000.002222ffffff no eth1.102 | ||
+ | tap1 | ||
+ | br0.103 8000.002222ffffff no eth1.103 | ||
+ | tap2 | ||
+ | </ | ||
+ | * To check if CoovaChilli started up fine: | ||
+ | <code bash> | ||
+ | ifconfig | ||
+ | |||
+ | .... | ||
+ | tun0: flags=81< | ||
+ | inet 10.101.0.1 | ||
+ | inet6 fe80:: | ||
+ | unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 | ||
+ | RX packets 0 bytes 0 (0.0 B) | ||
+ | RX errors 0 dropped 0 overruns 0 frame 0 | ||
+ | TX packets 10 bytes 592 (592.0 B) | ||
+ | TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 | ||
+ | |||
+ | tun1: flags=81< | ||
+ | inet 10.1.0.1 | ||
+ | inet6 fe80:: | ||
+ | unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 | ||
+ | RX packets 0 bytes 0 (0.0 B) | ||
+ | RX errors 0 dropped 0 overruns 0 frame 0 | ||
+ | TX packets 10 bytes 592 (592.0 B) | ||
+ | TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 | ||
+ | |||
+ | tun2: flags=81< | ||
+ | inet 10.1.0.1 | ||
+ | inet6 fe80:: | ||
+ | unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00 | ||
+ | RX packets 0 bytes 0 (0.0 B) | ||
+ | RX errors 0 dropped 0 overruns 0 frame 0 | ||
+ | TX packets 10 bytes 592 (592.0 B) | ||
+ | TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 | ||
+ | |||
+ | .... | ||
+ | |||
+ | </ | ||
+ | |||