server
port 1194 proto udp dev tun0 ca ca.crt cert server.crt key server.key # This file should be kept secret dh dh1024.pem server 192.168.100.0 255.255.255.0 ifconfig-pool-persist ipp.txt push "route 10.0.0.0 255.0.0.0" push "route 172.10.0.0 255.255.0.0" push "route 172.11.0.0 255.255.0.0" push "route 172.21.0.0 255.255.0.0" push "route 172.25.0.0 255.255.0.0" push "route 172.27.0.0 255.255.0.0" push "route 172.28.0.0 255.255.0.0" push "route 172.30.0.0 255.255.0.0" push "route 172.31.0.0 255.255.0.0" push "route 172.32.0.0 255.255.0.0" push "route 172.40.0.0 255.255.0.0" push "route 172.41.0.0 255.255.0.0" push "route 172.42.0.0 255.255.0.0" push "route 172.29.30.0 255.255.255.0" push "route 172.29.27.0 255.255.255.0" client-to-client keepalive 10 120 tls-auth ta.key 0 # This file is secret comp-lzo max-clients 200 user nobody group nogroup persist-key persist-tun status openvpn-status.log verb 4 crl-verify crl.pem management localhost 11111 plugin /usr/lib/openvpn/openvpn-plugin-auth-pam.so login push "dhcp-option DNS 192.168.100.1" push "dhcp-option DOMAIN slicetest.com" reneg-sec 36000client
client dev tun proto udp remote vpn.vpcprod.mydomain.com 1194 resolv-retry infinite nobind user nobody group nogroup persist-key persist-tun ca ca_vpcprod.crt cert client_vpcprod.crt key client_vpcprod.key ns-cert-type server tls-auth ta_vpcprod.key 1 comp-lzo verb 3 reneg-sec 36000
No comments:
Post a Comment
Note: only a member of this blog may post a comment.