2,253
edits
Changes
m
VE container just like on a usual standalone linux box.
Robot: Automated text replacement (-VE +container)
This article describes how to use VPN via the TUN/TAP device inside a [[VEcontainer]].
== Kernel TUN/TAP support ==
OpenVZ supports VPN inside a VE container via kernel TUN/TAP module and device.To allow VE container #101 to use the TUN/TAP device the following should be done:
Make sure the '''tun''' module has been already loaded on the [[hardware node]]:
You can also add it into /etc/modules.conf to make sure it will be loaded on every reboot automatically.
== Granting VE container an access to TUN/TAP ==Allow your VE container to use the tun/tap device:
<pre>
# vzctl set 101 --devices c:10:200:rw --save
</pre>
And create the character device file inside the VEcontainer:
<pre>
# vzctl exec 101 mkdir -p /dev/net
</pre>
== Configuring VPN inside VE container ==
After the configuration steps above are done it is possible to use VPN software working with TUN/TAP inside
The following software can be used for VPN with TUN/TAP:
