Skip to content

Instantly share code, notes, and snippets.

@AymericG
Created April 18, 2013 05:58
Show Gist options
  • Save AymericG/5410475 to your computer and use it in GitHub Desktop.
Save AymericG/5410475 to your computer and use it in GitHub Desktop.
server.conf
port 1194
proto udp
# "dev tun" will create a routed IP tunnel,
# "dev tap" will create an ethernet tunnel.
dev tun
ca /etc/openvpn/server/ca.crt
cert /etc/openvpn/server/server.crt
key /etc/openvpn/server/server.key # This file should be kept secret
dh /etc/openvpn/server/dh2048.pem
# Configure server mode and supply a VPN subnet
# for OpenVPN to draw client addresses from.
# The server will take 10.8.0.1 for itself,
# the rest will be made available to clients.
# Each client will be able to reach the server
# on 10.8.0.1. Comment this line out if you are
# ethernet bridging. See the man page for more info.
server 10.215.1.0 255.255.255.0
ifconfig-pool-persist /etc/openvpn/server/ipp.txt
# Push routes to the client to allow it
# to reach other private subnets behind
# the server. Remember that these
# private subnets will also need
# to know to route the OpenVPN client
# address pool (10.8.0.0/255.255.255.0)
# back to the OpenVPN server.
;push "route 192.168.10.0 255.255.255.0"
;push "route 192.168.20.0 255.255.255.0"
push "route 172.18.0.0 255.255.255.0"
push "route 172.18.1.0 255.255.255.0"
# To assign specific IP addresses to specific
# clients or if a connecting client has a private
# subnet behind it that should also have VPN access,
# use the subdirectory "ccd" for client-specific
# configuration files (see man page for more info).
# EXAMPLE: Suppose the client
# having the certificate common name "Thelonious"
# also has a small subnet behind his connecting
# machine, such as 192.168.40.128/255.255.255.248.
# First, uncomment out these lines:
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
# Then create a file ccd/Thelonious with this line:
# iroute 192.168.40.128 255.255.255.248
# This will allow Thelonious' private subnet to
# access the VPN. This example will only work
# if you are routing, not bridging, i.e. you are
# using "dev tun" and "server" directives.
client-config-dir /etc/openvpn/server/ccd
#route 172.18.1.0 255.255.255.0 #MATTHEW -> THIS ROUTE WAS CAUSING ISSUE
keepalive 10 120
comp-lzo
persist-key
persist-tun
status /etc/openvpn/server/openvpn-status.log
verb 3
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment