From owner-freebsd-questions@FreeBSD.ORG  Sun Jul  6 10:36:10 2014
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits))
 (No client certificate requested)
 by hub.freebsd.org (Postfix) with ESMTPS id C6CCCD9
 for <freebsd-questions@freebsd.org>; Sun,  6 Jul 2014 10:36:10 +0000 (UTC)
Received: from vps.markoturk.info (vps.markoturk.info [109.73.172.217])
 by mx1.freebsd.org (Postfix) with ESMTP id 93C8C258A
 for <freebsd-questions@freebsd.org>; Sun,  6 Jul 2014 10:36:10 +0000 (UTC)
Received: by vps.markoturk.info (Postfix, from userid 1000)
 id 6331E674AD72; Sun,  6 Jul 2014 12:26:43 +0200 (CEST)
Date: Sun, 6 Jul 2014 12:26:43 +0200
From: Marko Turk <markoml@markoturk.info>
To: freebsd-questions@freebsd.org
Subject: 10.0-RELEASE openvpn jail with ezjail
Message-ID: <20140706102642.GA13371@vps.markoturk.info>
Reply-To: marko@markoturk.info
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;
 protocol="application/pgp-signature"; boundary="PNTmBPCT7hxwcZjr"
Content-Disposition: inline
User-Agent: Mutt/1.5.21 (2010-09-15)
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 06 Jul 2014 10:36:10 -0000


--PNTmBPCT7hxwcZjr
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline

Hi,

I'm trying to create an OpenVPN jail on 10.0-RELEASE using tun device.
I've created the tun1 device on host and added following to the ezjail
config for my vpn jail (/usr/local/etc/ezjail/vpnj):

export jail_vpnj_ip_multi0="tun1|10.8.0.1 10.8.0.2 netmask 255.255.255.255"

When I try to start the jail, I get the error:

jail: vpnj: /sbin/ifconfig tun1 inet 10.8.0.1/32 alias: failed

Ezjail config ip_multi0 gets translated into this jail.conf parameter
(/var/run/jail.vpnj.conf):

ip4.addr += "tun1|10.8.0.1/32";

I did the same steps on 9.2-RELEASE and it worked fine. What is the
correct way to do this on 10.0-RELEASE?

Thanks.

Regards,
Marko

--PNTmBPCT7hxwcZjr
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: Digital signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
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=J5w8
-----END PGP SIGNATURE-----

--PNTmBPCT7hxwcZjr--