2014-12-03 13:53:32 -05:00
|
|
|
port 1194
|
|
|
|
|
proto udp
|
2014-12-03 14:05:36 -05:00
|
|
|
dev tun0
|
2014-12-03 13:53:32 -05:00
|
|
|
ca /etc/openvpn/rsa/keys/ca.crt
|
2014-12-03 14:05:36 -05:00
|
|
|
cert /etc/openvpn/rsa/keys/vpn.example.com.crt
|
|
|
|
|
key /etc/openvpn/rsa/keys/vpn.example.com.key
|
2014-12-03 13:53:32 -05:00
|
|
|
dh /etc/openvpn/rsa/keys/dh2048.pem
|
|
|
|
|
server 192.168.5.0 255.255.255.0
|
|
|
|
|
cipher AES-256-CBC
|
|
|
|
|
user nobody
|
|
|
|
|
group nogroup
|
2014-12-03 14:05:36 -05:00
|
|
|
status /etc/openvpn/vpn.example.com.status
|
|
|
|
|
log-append /etc/openvpn/vpn.example.com.log
|
2014-12-03 13:53:32 -05:00
|
|
|
verb 2
|
|
|
|
|
mute 20
|
|
|
|
|
max-clients 100
|
|
|
|
|
management 127.0.0.1 7505
|
|
|
|
|
keepalive 10 120
|
|
|
|
|
tls-server
|
|
|
|
|
comp-lzo
|
|
|
|
|
persist-key
|
|
|
|
|
persist-tun
|
|
|
|
|
float
|
2014-12-03 14:05:36 -05:00
|
|
|
plugin /usr/lib/openvpn/openvpn-auth-ldap.so "/etc/openvpn/vpn.example.com.ldap"
|
2014-12-03 13:53:32 -05:00
|
|
|
push "route 192.168.1.0 255.255.255.0"
|
|
|
|
|
push "dhcp-option DNS 192.168.1.21"
|
|
|
|
|
push "dhcp-option DNS 192.168.1.22"
|
2014-12-03 14:05:36 -05:00
|
|
|
push "dhcp-option DOMAIN example.com"
|
2014-12-03 13:53:32 -05:00
|
|
|
replay-window 128 40
|
|
|
|
|
|
