tls-home.conf 1.9 KB

1234567891011121314151617181920212223242526272829303132333435363738394041424344454647484950515253545556575859606162636465666768697071727374757677787980818283
  1. #
  2. # Sample OpenVPN configuration file for
  3. # home using SSL/TLS mode and RSA certificates/keys.
  4. #
  5. # '#' or ';' may be used to delimit comments.
  6. # Use a dynamic tun device.
  7. # For Linux 2.2 or non-Linux OSes,
  8. # you may want to use an explicit
  9. # unit number such as "tun1".
  10. # OpenVPN also supports virtual
  11. # ethernet "tap" devices.
  12. dev tun
  13. # Our OpenVPN peer is the office gateway.
  14. remote 1.2.3.4
  15. # 10.1.0.2 is our local VPN endpoint (home).
  16. # 10.1.0.1 is our remote VPN endpoint (office).
  17. ifconfig 10.1.0.2 10.1.0.1
  18. # Our up script will establish routes
  19. # once the VPN is alive.
  20. up ./home.up
  21. # In SSL/TLS key exchange, Office will
  22. # assume server role and Home
  23. # will assume client role.
  24. tls-client
  25. # Certificate Authority file
  26. ca my-ca.crt
  27. # Our certificate/public key
  28. cert home.crt
  29. # Our private key
  30. key home.key
  31. # OpenVPN 2.0 uses UDP port 1194 by default
  32. # (official port assignment by iana.org 11/04).
  33. # OpenVPN 1.x uses UDP port 5000 by default.
  34. # Each OpenVPN tunnel must use
  35. # a different port number.
  36. # lport or rport can be used
  37. # to denote different ports
  38. # for local and remote.
  39. ; port 1194
  40. # Downgrade UID and GID to
  41. # "nobody" after initialization
  42. # for extra security.
  43. ; user nobody
  44. ; group nobody
  45. # If you built OpenVPN with
  46. # LZO compression, uncomment
  47. # out the following line.
  48. ; comp-lzo
  49. # Send a UDP ping to remote once
  50. # every 15 seconds to keep
  51. # stateful firewall connection
  52. # alive. Uncomment this
  53. # out if you are using a stateful
  54. # firewall.
  55. ; ping 15
  56. # Uncomment this section for a more reliable detection when a system
  57. # loses its connection. For example, dial-ups or laptops that
  58. # travel to other locations.
  59. ; ping 15
  60. ; ping-restart 45
  61. ; ping-timer-rem
  62. ; persist-tun
  63. ; persist-key
  64. # Verbosity level.
  65. # 0 -- quiet except for fatal errors.
  66. # 1 -- mostly quiet, but display non-fatal network errors.
  67. # 3 -- medium output, good for normal operation.
  68. # 9 -- verbose, good for troubleshooting
  69. verb 3