2,306
edits
Changes
Jump to navigation
Jump to search
mLine 1:
Line 1: − + + − + − <nowiki>auto eth0+ − + + − + − + − bridge_ports eth0+ − wpa-driver wired+ − wpa-conf /etc/wpa_supplicant.conf+ − bridge_hw ec:8e:b5:77:3e:e1</nowiki>+ − + + + + + + + + + + − + − + − + − + − ssid="BBVA"+ − key_mgmt=IEEE8021X+ − eap=TLS+ − identity="host/WF0006D3.ad.bbva.com"+ − ca_cert="/NAC/cacert.pem"+ − client_cert="/NAC/cert.pem"+ − private_key="/NAC/key.pem"+ − private_key_passwd="1234567890"+ − + − * Change routes to go through br0 − <nowiki>#!/bin/bash − echo "Removing routes" − sudo ip r d default via 15.17.160.1 dev br0 − echo "Adding routes"+ − sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0 − sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0 − sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0 − sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0 − sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0 − sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0</nowiki> − * Edit /etc/ssl/openssl.cnf+ − <nowiki>... + − nsCertType = client+ − + + + + + + + +
no edit summary
* Install bridge utils
*Install bridge utils
apt install bridge-utils
apt install bridge-utils
* sudo nano /etc/network/interfaces
*sudo nano /etc/network/interfaces<syntaxhighlight lang="text">
allow-hotplug eth0
auto eth0
allow-hotplug eth0
iface eth0 inet manual
iface eth0 inet manual
auto br0
auto br0
iface br0 inet manual
iface br0 inet dhcp
bridge_ports eth0
wpa-driver wired wpa-conf
/etc/wpa_supplicant.conf
bridge_hw ec:8e:b5:77:3e:e1
* Edit /etc/wpa_supplicant.conf
dns-nameservers 127.0.0.1
post-up route add -net 20.1.43.0 netmask 255.255.255.0 gw 15.17.160.1
up route add -net 22.0.0.0 netmask 255.255.255.0 gw 15.17.160.1
#gateaway 10.23.0.1
</syntaxhighlight>
<br />
*Edit /etc/wpa_supplicant.conf
<nowiki>ctrl_interface=/var/run/wpa_supplicant
<nowiki>ctrl_interface=/var/run/wpa_supplicant
ctrl_interface_group=0
ctrl_interface_group=0
eapol_version=2
eapol_version=2
ap_scan=0
ap_scan=0
network={
network={
ssid="BBVA"
key_mgmt=IEEE8021X
eap=TLS
identity="host/WF0006D3.ad.bbva.com"
ca_cert="/NAC/cacert.pem"
client_cert="/NAC/cert.pem"
private_key="/NAC/key.pem"
private_key_passwd="1234567890"
}</nowiki>
}</nowiki>
*Change routes to go through br0
<nowiki>#!/bin/bash
echo "Removing routes"
sudo ip r d default via 15.17.160.1 dev br0
...</nowiki>
echo "Adding routes"
sudo ip r a 20.1.30.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.40.0/24 via 15.17.160.1 dev br0
sudo ip r a 20.1.43.0/24 via 15.17.160.1 dev br0
sudo ip r a 22.0.0.0/16 via 15.17.160.1 dev br0
sudo ip r a 20.1.32.0/24 via 15.17.160.1 dev br0
sudo ip r a 192.168.45.0/24 via 15.17.160.1 dev br0</nowiki>