Differences
This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision Next revision Both sides next revision | ||
howto:utiliser_la_connexion_vpn_de_la_brique_en_filaire [2017/09/23 17:37] emile |
howto:utiliser_la_connexion_vpn_de_la_brique_en_filaire [2017/09/23 17:45] emile |
||
---|---|---|---|
Line 92: | Line 92: | ||
ip6tables -w -I FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ip6tables -w -I FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ||
ip6tables -w -I FORWARD -i eth0 -o tun0 -j ACCEPT | ip6tables -w -I FORWARD -i eth0 -o tun0 -j ACCEPT | ||
+ | ip6tables -w -I FORWARD -i eth0 -o wlan0 -j ACCEPT | ||
+ | ip6tables -w -I FORWARD -i wlan0 -o eth0 -j ACCEPT | ||
ip6tables -w -I INPUT -i eth0 -j ACCEPT | ip6tables -w -I INPUT -i eth0 -j ACCEPT | ||
ip6tables -w -I OUTPUT -o eth0 -j ACCEPT | ip6tables -w -I OUTPUT -o eth0 -j ACCEPT | ||
Line 99: | Line 101: | ||
iptables -w -I FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | iptables -w -I FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ||
iptables -w -I FORWARD -i eth0 -o tun0 -j ACCEPT | iptables -w -I FORWARD -i eth0 -o tun0 -j ACCEPT | ||
+ | iptables -w -I FORWARD -i eth0 -o wlan0 -j ACCEPT | ||
+ | iptables -w -I FORWARD -i wlan0 -o eth0 -j ACCEPT | ||
iptables -w -I INPUT -i eth0 -j ACCEPT | iptables -w -I INPUT -i eth0 -j ACCEPT | ||
;; | ;; | ||
Line 106: | Line 110: | ||
ip6tables -w -D FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ip6tables -w -D FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ||
ip6tables -w -D FORWARD -i eth0 -o tun0 -j ACCEPT | ip6tables -w -D FORWARD -i eth0 -o tun0 -j ACCEPT | ||
+ | ip6tables -w -D FORWARD -i eth0 -o wlan0 -j ACCEPT | ||
+ | ip6tables -w -D FORWARD -i wlan0 -o eth0 -j ACCEPT | ||
ip6tables -w -D INPUT -i eth0 -j ACCEPT | ip6tables -w -D INPUT -i eth0 -j ACCEPT | ||
ip6tables -w -D OUTPUT -o eth0 -j ACCEPT | ip6tables -w -D OUTPUT -o eth0 -j ACCEPT | ||
Line 113: | Line 119: | ||
iptables -w -D FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | iptables -w -D FORWARD -i tun0 -o eth0 -m conntrack --ctstate ESTABLISHED,RELATED -j ACCEPT | ||
iptables -w -D FORWARD -i eth0 -o tun0 -j ACCEPT | iptables -w -D FORWARD -i eth0 -o tun0 -j ACCEPT | ||
+ | iptables -w -D FORWARD -i eth0 -o wlan0 -j ACCEPT | ||
+ | iptables -w -D FORWARD -i wlan0 -o eth0 -j ACCEPT | ||
iptables -w -D INPUT -i eth0 -j ACCEPT | iptables -w -D INPUT -i eth0 -j ACCEPT | ||
;; | ;; | ||
Line 120: | Line 128: | ||
;; | ;; | ||
esac | esac | ||
+ | |||
+ | Puis on fait en sorte que tout démarre au boot: | ||
+ | |||
+ | systemctl daemon-reload | ||
+ | systemctl enable wiredgw.service | ||
C'est à peu près tout :) on peut rebooter notre brique pour voir si ça fonctionne bien! | C'est à peu près tout :) on peut rebooter notre brique pour voir si ça fonctionne bien! |