Skip to main content

Linux tuntap using openssh

Project description

sshtuntap

Linux TUN/TAP using the openssh and Python3

This package comes with two command line interfaces:

  • ssh-tuntap-server
  • ssh-tuntap-client

this tutorial show's how to use this project:

Tutorial

Currently only point-to-point (tun) layer-3 tunneling is supported.

Install

You have to install this package on both client and server.

sudo -H pip3 install sshtuntap

Or

sudo -H pip3 install git+https://github.com/pylover/sshtuntap.git

Bash auto completion

sudo ssh-tuntap-server completion install
sudo ssh-tuntap-client completion install

Open new bash instance to perform changes.

Help?

ssh-tuntap-server --help
ssh-tuntap-client --help

Server setup

The server cli stands for setup network, add, delete and list users. this is just a utility to perform user and tuntap interface management and ip address assignment.

Install ifupdown package

Install ifupdown package in server.

apt install ifupdown

OpenSSH Server

Enable ssh tunneling on the server by editing the /etc/ssh/sshd_config and ensure the line:

PermitTunnel yes

Or

PermitTunnel point-to-point

see man 5 sshd_config for more info.

Restart the ssh server to perform the changes.

Define Network

ssh-tuntap-server setup

Or

ssh-tuntap-server setup 192.168.100.0/24

Add foo host

You have to create the server user mannualy (depends on your distro).

Here I'm using ubuntu server 18.04. and assume the server's hostname is example.com.

Run these commands on the server:

sudo adduser foo

Then use this command create /home/foo/.ssh/tuntap.yml:

ssh-tuntap-server add foo

Client

Clinet command line stands for fetch host configuration from the server and perform connection using the ssh -w.

ssh-copy-id foo@example.com
ssh-tuntap-client setup foo@example.com

Use this to connect:

sudo ssh-tuntap-clinet connect

Nat

Edit /etc/sysctl.conf on the server to enable ip forwarding.

net.ipv4.ip_forward = 1

Run sysctl -p to refresh with the new configuration

sudo sysctl -p

Configure NAT

sudo iptables -tnat -APOSTROUTING -s192.168.100.0/24 -jMASQUERADE

Project details


Download files

Download the file for your platform. If you're not sure which to choose, learn more about installing packages.

Source Distribution

sshtuntap-1.1.1.tar.gz (7.1 kB view hashes)

Uploaded Source

Supported by

AWS AWS Cloud computing and Security Sponsor Datadog Datadog Monitoring Fastly Fastly CDN Google Google Download Analytics Microsoft Microsoft PSF Sponsor Pingdom Pingdom Monitoring Sentry Sentry Error logging StatusPage StatusPage Status page