Tuesday, 26 April 2016

openvpn confs - starpoint

server

port 1194
proto udp
dev tun0
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
server 192.168.100.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "route 10.0.0.0 255.0.0.0"
push "route 172.10.0.0 255.255.0.0"
push "route 172.11.0.0 255.255.0.0"
push "route 172.21.0.0 255.255.0.0"
push "route 172.25.0.0 255.255.0.0"
push "route 172.27.0.0 255.255.0.0"
push "route 172.28.0.0 255.255.0.0"
push "route 172.30.0.0 255.255.0.0"
push "route 172.31.0.0 255.255.0.0"
push "route 172.32.0.0 255.255.0.0"
push "route 172.40.0.0 255.255.0.0"
push "route 172.41.0.0 255.255.0.0"
push "route 172.42.0.0 255.255.0.0"
push "route 172.29.30.0 255.255.255.0"
push "route 172.29.27.0 255.255.255.0"
client-to-client
keepalive 10 120
tls-auth ta.key 0 # This file is secret
comp-lzo
max-clients 200
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
crl-verify crl.pem
management localhost 11111
plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so login
push "dhcp-option DNS 192.168.100.1"
push "dhcp-option DOMAIN slicetest.com"
reneg-sec 36000
client

client
dev tun
proto udp
remote vpn.vpcprod.mydomain.com 1194
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
ca ca_vpcprod.crt
cert client_vpcprod.crt
key client_vpcprod.key
ns-cert-type server
tls-auth ta_vpcprod.key 1
comp-lzo
verb 3
reneg-sec 36000

No comments:

Post a Comment

Note: only a member of this blog may post a comment.

Interview questions: 2020-12

Terraform provider vs provisioner Load balancing Network Load Balancer vs Application Load Balancer  Networking Layer 1 vs Layer 4 haproxy u...