Skip to content

Instantly share code, notes, and snippets.

@zukka77
Last active September 25, 2019 05:28
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save zukka77/a6f925bb08dd19eb1e89dcde0622b9d9 to your computer and use it in GitHub Desktop.
Save zukka77/a6f925bb08dd19eb1e89dcde0622b9d9 to your computer and use it in GitHub Desktop.
Openvpn configurations
#########SERVER TCP
port 1194
proto tcp6
dev tun
ca ca.crt
cert ${path_to_crt}
key ${path_to_key}
dh dh.pem
server 10.6.0.0 255.255.255.0
ifconfig-pool-persist ipp-tcp.txt
client-config-dir ccd-tcp
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status-tcp.log
verb 3
#########SERVER UDP
port 1194
proto udp6
dev tun
ca ca.crt
cert ${path_to_crt}
key ${path_to_key}
dh dh.pem
server 10.7.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
client-config-dir ccd
push "redirect-gateway def1 bypass-dhcp"
keepalive 10 120
cipher AES-256-CBC
comp-lzo
persist-key
persist-tun
status openvpn-status.log
verb 3
explicit-exit-notify 1
#########FILE IN CCD DIR
#FILENAME IS CLIENT CN
ifconfig-push 10.7.0.7 10.7.0.1
#########CLIENT
remote ${remote_server}
tls-client
#route-nopull #disables redirect-gateway
pull-filter ignore redirect-gateway
proto udp6
proto udp
dev tun
pull
nobind
pkcs12 ${path_top_p12}
#cert
#key
#ca
verb 3
comp-lzo
fast-io
remote-cert-tls server
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment