Skip to content

Commit ae48074

Browse files
committed
using a link-local subnet breaks networkmanager-openvpn
also a generally a terrible idea Signed-off-by: Jordan Sokolic <[email protected]>
1 parent 8e0182c commit ae48074

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docs/vpn.md

+3-3
Original file line numberDiff line numberDiff line change
@@ -11,7 +11,7 @@ mknod /dev/net/tun c 10 200' /etc/rc.local
1111

1212

1313
## Add firewall rules
14-
We will be using `169.254.11.0/29` as our VPN subnet.
14+
We will be using `10.16.0.0/24` as our VPN subnet.
1515

1616
* Add `tun0` device to LAN zone and allow port 1194 UDP from WAN:
1717

@@ -41,7 +41,7 @@ set firewall.ovpn_nat=nat
4141
set firewall.ovpn_nat.target='MASQUERADE'
4242
set firewall.ovpn_nat.src='*'
4343
set firewall.ovpn_nat.name='OpenVPN-NAT'
44-
set firewall.ovpn_nat.src_ip='169.254.11.0/29'
44+
set firewall.ovpn_nat.src_ip='10.16.0.0/24'
4545
commit firewall
4646
EOF
4747
# /etc/init.d/firewall restart
@@ -98,7 +98,7 @@ Repeat the last step for any additional clients.
9898
package openvpn
9999
config openvpn "$(echo $EASYRSA_REQ_CN | sed 's/\./_/g')"
100100
option enabled "1"
101-
option server "169.254.11.0 255.255.255.248"
101+
option server "10.16.0.0 255.255.255.0"
102102
option proto "udp"
103103
option port "1194"
104104
option dev "tun"

0 commit comments

Comments
 (0)