This is a QuickTun distributable package for Ubiquiti EdgeOS, providing support for QuickTun TUN interfaces through the EdgeOS CLI.
Architecture | Compatible | Notes | |
---|---|---|---|
EdgeRouter X (ERX) | mipsel | Yes | Builds with crossbuild-essential, see below |
On 64-bit Debian Jessie, start by installing the toolchain:
echo "deb https://emdebian.org/tools/debian/ jessie main" >> /etc/apt/sources.list
wget https://emdebian.org/tools/debian/emdebian-toolchain-archive.key
apt-key add emdebian-toolchain-archive.key
dpkg --add-architecture mipsel
apt-get update
apt-get install crossbuild-essential-mipsel
Compile the package then by cloning the repository and running 'make':
PREFIX='mipsel-linux-gnu-' PKGARCH='mipsel' make -e
The package vyatta-quicktun.deb
will be created in the parent directory. Copy it to the EdgeRouter and install it:
sudo dpkg -i vyatta-quicktun.deb
Create the interface by specifying protocol (either raw
, nacl0
, nacltai
or salty
), remote and local endpoints and your peer's public key:
configure
set interfaces quicktun tun0 description "QuickTun Tunnel"
set interfaces quicktun tun0 protocol salty
set interfaces quicktun tun0 local address 1.1.1.1
set interfaces quicktun tun0 local port 1111
set interfaces quicktun tun0 remote address 2.2.2.2
set interfaces quicktun tun0 remote port 2222
set interfaces quicktun tun0 remote public-key XXXXXXXXXX
commit
Your own keypair will automatically be generated if not specified. You can retrieve your keypair:
configure
show interfaces quicktun tun0 local private-key
show interfaces quicktun tun0 local public-key
Your private key is secret. Do not share it. Send your public key to your peer.
Add IPv4 or IPv6 addresses to the virtual tunnel interface:
configure
set interfaces quicktun tun0 tunnel address 3.3.3.3/24
set interfaces quicktun tun0 tunnel address fd33:3333:3333:3333::3/64
commit
Set any combination of firewall chains to be active on the virtual tunnel interface:
configure
set interfaces quicktun tun0 firewall in name CHAIN-IPv4-IN
set interfaces quicktun tun0 firewall local name CHAIN-IPv4-LOCAL
set interfaces quicktun tun0 firewall out name CHAIN-IPv4-OUT
set interfaces quicktun tun0 firewall in ipv6-name CHAIN-IPv6-IN
set interfaces quicktun tun0 firewall local ipv6-name CHAIN-IPv6-LOCAL
set interfaces quicktun tun0 firewall out ipv6-name CHAIN-IPv6-OUT
commit
In operational view, you can restart the quicktun process associated with an interface:
restart quicktun tun0