96 lines
2.4 KiB
Text
96 lines
2.4 KiB
Text
|
#
|
||
|
|
# Routed point-to-point server
|
||
|
|
#
|
||
|
|
config openvpn_recipe server_tun_ptp
|
||
|
|
option _description "Simple server configuration for a routed point-to-point VPN"
|
||
|
|
option _role "server"
|
||
|
|
option dev "tun"
|
||
|
|
option port "1194"
|
||
|
|
option ifconfig "10.0.0.1 10.0.0.2"
|
||
|
|
option secret "shared-secret.key"
|
||
|
|
|
||
|
|
#
|
||
|
|
# Routed point-to-point client
|
||
|
|
#
|
||
|
|
config openvpn_recipe client_tun_ptp
|
||
|
|
option _description "Simple client configuration for a routed point-to-point VPN"
|
||
|
|
option _role "client"
|
||
|
|
option dev "tun"
|
||
|
|
option remote "mypeer.dyndns.org"
|
||
|
|
option port "1194"
|
||
|
|
option ifconfig "10.0.0.2 10.0.0.1"
|
||
|
|
option secret "shared-secret.key"
|
||
|
|
option nobind "1"
|
||
|
|
|
||
|
|
|
||
|
|
#
|
||
|
|
# Routed multi-client server
|
||
|
|
#
|
||
|
|
config openvpn_recipe server_tun
|
||
|
|
option _description "Server configuration for a routed multi-client VPN"
|
||
|
|
option _role "server"
|
||
|
|
option dev "tun"
|
||
|
|
option port "1194"
|
||
|
|
option server "10.0.100.0 255.255.255.0"
|
||
|
|
option ca "ca.crt"
|
||
|
|
option cert "server.crt"
|
||
|
|
option key "server.key"
|
||
|
|
option dh "dh1024.pem"
|
||
|
|
option client_to_client "1"
|
||
|
|
option keepalive "10 120"
|
||
|
|
option comp_lzo "1"
|
||
|
|
|
||
|
|
#
|
||
|
|
# Routed client
|
||
|
|
#
|
||
|
|
config openvpn_recipe client_tun
|
||
|
|
option _description "Client configuration for a routed multi-client VPN"
|
||
|
|
option _role "client"
|
||
|
|
option client "1"
|
||
|
|
option dev "tun"
|
||
|
|
option remote "vpnserver.example.org 1194"
|
||
|
|
option ca "ca.crt"
|
||
|
|
option cert "my_client.crt"
|
||
|
|
option key "my_client.key"
|
||
|
|
option dh "dh1024.pem"
|
||
|
|
option ns_cert_type "server"
|
||
|
|
option keepalive "10 120"
|
||
|
|
option comp_lzo "1"
|
||
|
|
option nobind "1"
|
||
|
|
|
||
|
|
|
||
|
|
#
|
||
|
|
# Multi-client ethernet bridge server
|
||
|
|
#
|
||
|
|
config openvpn_recipe server_tun
|
||
|
|
option _description "Server configuration for an ethernet bridge VPN"
|
||
|
|
option _role "server"
|
||
|
|
option dev "tap"
|
||
|
|
option port "1194"
|
||
|
|
option server_bridge "192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254"
|
||
|
|
option ca "ca.crt"
|
||
|
|
option cert "server.crt"
|
||
|
|
option key "server.key"
|
||
|
|
option dh "dh1024.pem"
|
||
|
|
option client_to_client "1"
|
||
|
|
option keepalive "10 120"
|
||
|
|
option comp_lzo "1"
|
||
|
|
|
||
|
|
#
|
||
|
|
# Ethernet bridge client
|
||
|
|
#
|
||
|
|
config openvpn_recipe client_tun
|
||
|
|
option _description "Client configuration for an ethernet bridge VPN"
|
||
|
|
option _role "client"
|
||
|
|
option client "1"
|
||
|
|
option dev "tap"
|
||
|
|
option remote "vpnserver.example.org 1194"
|
||
|
|
option ca "ca.crt"
|
||
|
|
option cert "my_client.crt"
|
||
|
|
option key "my_client.key"
|
||
|
|
option dh "dh1024.pem"
|
||
|
|
option ns_cert_type "server"
|
||
|
|
option keepalive "10 120"
|
||
|
|
option comp_lzo "1"
|
||
|
|
option nobind "1"
|