45 lines
976 B
Plaintext
45 lines
976 B
Plaintext
mode server
|
|
daemon
|
|
tls-server
|
|
proto udp
|
|
port 1194
|
|
local 192.168.99.11
|
|
client-config-dir /opt/openvpn/ccd
|
|
script-security 3
|
|
|
|
; tunnel configuration
|
|
dev tap0
|
|
server-bridge 10.3.5.1 255.255.0.0 10.3.6.1 10.3.7.254
|
|
passtos
|
|
comp-lzo
|
|
persist-key
|
|
persist-tun
|
|
persist-local-ip
|
|
persist-remote-ip
|
|
|
|
; loggin and status
|
|
ifconfig-pool-persist /opt/openvpn/leases/openvpn.leases
|
|
status-version 2
|
|
status /opt/openvpn/status/openvpnserver-status.log 30;
|
|
verb 3
|
|
client-connect /opt/openvpn/scripts/logon.sh
|
|
client-disconnect /opt/openvpn/scripts/logoff.sh
|
|
|
|
; routing
|
|
;push "route 10.3.0.0 255.255.0.0"
|
|
|
|
; management
|
|
management localhost 6666
|
|
|
|
; certificates and authentication
|
|
dh /opt/openvpn/private/dh1024.pem
|
|
ca /opt/openvpn/ca/cacert.pem
|
|
cert /opt/openvpn/certs/hostcert.pem
|
|
key /opt/openvpn/private/hostkey.pem
|
|
client-cert-not-required
|
|
username-as-common-name
|
|
auth-user-pass-verify /opt/openvpn/scripts/openvpn-auth.sh via-env
|
|
;client-to-client
|
|
keepalive 10 60
|
|
max-clients 50
|