{"id":341,"date":"2014-10-05T10:56:19","date_gmt":"2014-10-05T10:56:19","guid":{"rendered":"http:\/\/192.168.2.32:8082\/?p=341"},"modified":"2014-10-05T10:57:48","modified_gmt":"2014-10-05T10:57:48","slug":"raspberry-pi-vpn-gateway","status":"publish","type":"post","link":"https:\/\/www.dev-metal.ch\/?p=341","title":{"rendered":"Raspberry PI VPN Gateway"},"content":{"rendered":"<p><!--more--><\/p>\n<h1>Installation<\/h1>\n<ul>\n<li>Mittels dd das Image &#8222;2013-09-25-wheezy-raspbian.img&#8220; auf die SD-Karte schreiben<\/li>\n<li>Mittels rasp-config (startet das erste Mal automatisch) Einstellungen vornehmen (Passwort, SD-Karte vergroessern, Sprache, Locale, etc.)<\/li>\n<\/ul>\n<h2>Systemupdate<\/h2>\n<ul>\n<li>\n<pre class=\"lang:sh decode:true\">apt-get update<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true\">apt-get upgrade<\/pre>\n<\/li>\n<\/ul>\n<h2>Anpassen interfaces<\/h2>\n<pre class=\"lang:sh decode:true\">vi \/etc\/network\/interfaces\r\n<\/pre>\n<pre class=\"lang:sh decode:true\">auto lo\r\n\r\niface lo inet loopback\r\n#iface eth0 inet dhcp\r\nauto eth0\r\niface eth0 inet static\r\naddress 192.168.1.150\r\nnetmask 255.255.255.0\r\nnetwork 192.168.1.0\r\nbroadcast 192.168.1.255\r\ngateway 192.168.1.1\r\ndns-nameservers 195.186.4.162\r\n\r\nauto eth0:1\r\niface eth0:1 inet static\r\naddress 192.168.1.254\r\nnetmask 255.255.255.0\r\nnetwork 192.168.1.0\r\nbroadcast 192.168.1.255\r\ngateway 192.168.1.1\r\n\r\nallow-hotplug wlan0\r\niface wlan0 inet manual\r\nwpa-roam \/etc\/wpa_supplicant\/wpa_supplicant.conf\r\niface default inet dhcp<\/pre>\n<h2>Installation OpenVPN<\/h2>\n<ul>\n<li>\n<pre class=\"lang:sh decode:true\">apt-get install openvpn openssl<\/pre>\n<\/li>\n<li>Die Zertifikate des VPN-Hosters auf den Raspberry kopieren und dann:\n<pre class=\"lang:sh decode:true \">sudo cp -r \/home\/pi\/expressvpn\/* \/etc\/openvpn<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true \">cd \/etc\/openvpn<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true\">sudo cp 11-Switzerland.ovpn standard.conf<\/pre>\n<\/li>\n<li>Dienst starten\n<pre class=\"lang:sh decode:true\">openvpn --conf \/etc\/openvpn\/standard.com<\/pre>\n<\/li>\n<li>Automatisch standard.conf beim Booten starten\n<pre class=\"lang:sh decode:true\">echo 'AUTOSTART=\"standard\"' &gt;&gt; \/etc\/default\/openvpn<\/pre>\n<\/li>\n<\/ul>\n<h2>IP-Tables Roules<\/h2>\n<ul>\n<li>\n<pre class=\"lang:sh decode:true\">touch \/etc\/network\/if-pre-up.d\/iptables<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true\">echo \"#!\/bin\/bash\" &gt;&gt; \/etc\/network\/if-pre-up.d\/iptables<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true\">echo \"\/sbin\/iptables-restore &lt; \/etc\/rulesiptables\" &gt;&gt; \/etc\/network\/if-pre-up.d\/iptables<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true  \">chmod +x \/etc\/network\/if-pre-up.d\/iptables<\/pre>\n<\/li>\n<li>\n<pre class=\"lang:sh decode:true\"> vi \/etc\/sysctl.conf<\/pre>\n<p>und in der Zeile<\/p>\n<pre class=\"lang:sh decode:true\">net.ipv4.ip_forward = 1<\/pre>\n<p>das # entfernen.<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_lmt_disableupdate":"","_lmt_disable":"","footnotes":""},"categories":[6],"tags":[],"class_list":["post-341","post","type-post","status-publish","format-standard","hentry","category-techdocs-diverses"],"modified_by":"ralph","_links":{"self":[{"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/posts\/341","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=341"}],"version-history":[{"count":2,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/posts\/341\/revisions"}],"predecessor-version":[{"id":343,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=\/wp\/v2\/posts\/341\/revisions\/343"}],"wp:attachment":[{"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=341"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=341"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.dev-metal.ch\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=341"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}