10.0-RELEASE openvpn jail with ezjail

[Marko Turk]

Hi,

I'm trying to create an OpenVPN jail on 10.0-RELEASE using tun device.
I've created the tun1 device on host and added following to the ezjail
config for my vpn jail (/usr/local/etc/ezjail/vpnj):

export jail_vpnj_ip_multi0="tun1|10.8.0.1 10.8.0.2 netmask 255.255.255.255"

When I try to start the jail, I get the error:

jail: vpnj: /sbin/ifconfig tun1 inet 10.8.0.1/32 alias: failed

Ezjail config ip_multi0 gets translated into this jail.conf parameter
(/var/run/jail.vpnj.conf):

ip4.addr += "tun1|10.8.0.1/32";

I did the same steps on 9.2-RELEASE and it worked fine. What is the
correct way to do this on 10.0-RELEASE?

Thanks.

Regards,
Marko
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: Digital signature
URL: <http://lists.freebsd.org/pipermail/freebsd-questions/attachments/20140706/b0a60c68/attachment.sig>