c2656a7220
* remove obsolete config options according to openwrt/openwrt@89b8ba9, fix for #2135 * whitespace/intendation fixes * replace fieldset leftover with div * fix finally recipe options transfer to regular config with "Add" Signed-off-by: Dirk Brenken <dev@brenken.org>
95 lines
2.4 KiB
Text
95 lines
2.4 KiB
Text
#
|
|
# Routed point-to-point server
|
|
#
|
|
config openvpn_recipe server_tun_ptp
|
|
option _description 'Simple server configuration for a routed point-to-point VPN'
|
|
option _role 'server'
|
|
option dev 'tun'
|
|
option ifconfig '10.0.0.1 10.0.0.2'
|
|
option secret 'shared-secret.key'
|
|
option keepalive '10 60'
|
|
option verb '3'
|
|
option mssfix '1420'
|
|
|
|
#
|
|
# Routed point-to-point client
|
|
#
|
|
config openvpn_recipe client_tun_ptp
|
|
option _description 'Simple client configuration for a routed point-to-point VPN'
|
|
option _role 'client'
|
|
option dev 'tun'
|
|
list remote 'vpnserver.example.org'
|
|
option ifconfig '10.0.0.2 10.0.0.1'
|
|
option secret 'shared-secret.key'
|
|
option nobind '1'
|
|
option verb '3'
|
|
|
|
#
|
|
# Routed multi-client server
|
|
#
|
|
config openvpn_recipe server_tun
|
|
option _description 'Server configuration for a routed multi-client VPN'
|
|
option _role 'server'
|
|
option dev 'tun'
|
|
option server '10.0.100.0 255.255.255.0'
|
|
option ca 'ca.crt'
|
|
option cert 'server.crt'
|
|
option key 'server.key'
|
|
option dh 'dh1024.pem'
|
|
option keepalive '10 60'
|
|
option verb '3'
|
|
option mssfix '1420'
|
|
|
|
#
|
|
# Routed client
|
|
#
|
|
config openvpn_recipe client_tun
|
|
option _description 'Client configuration for a routed multi-client VPN'
|
|
option _role 'client'
|
|
option client '1'
|
|
option dev 'tun'
|
|
list remote 'vpnserver.example.org'
|
|
option pkcs12 'my_client.p12'
|
|
option remote_cert_tls 'server'
|
|
option nobind '1'
|
|
option persist_key '1'
|
|
option persist_tun '1'
|
|
option verb '3'
|
|
option reneg_sec '0'
|
|
option float '1'
|
|
|
|
#
|
|
# Multi-client ethernet bridge server
|
|
#
|
|
config openvpn_recipe server_tap_bridge
|
|
option _description 'Server configuration for an ethernet bridge VPN'
|
|
option _role 'server'
|
|
option dev 'tap'
|
|
option server_bridge '192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254'
|
|
option ca 'ca.crt'
|
|
option cert 'server.crt'
|
|
option key 'server.key'
|
|
option dh 'dh1024.pem'
|
|
option keepalive '10 60'
|
|
option verb '3'
|
|
option mssfix '1420'
|
|
|
|
#
|
|
# Ethernet bridge client
|
|
#
|
|
config openvpn_recipe client_tap_bridge
|
|
option _description 'Client configuration for an ethernet bridge VPN'
|
|
option _role 'client'
|
|
option client '1'
|
|
option dev 'tap'
|
|
list remote 'vpnserver.example.org'
|
|
option ca 'ca.crt'
|
|
option cert 'my_client.crt'
|
|
option key 'my_client.key'
|
|
option dh 'dh1024.pem'
|
|
option remote_cert_tls 'server'
|
|
option nobind '1'
|
|
option persist_key '1'
|
|
option verb '3'
|
|
option reneg_sec '0'
|
|
option float '1'
|