1577 Serverteknologi - Web-server Opgaver II/Gruppe1

From Teknologisk videncenter
Jump to: navigation, search
mode server
tls-server

local 172.16.4.89  ## ip/hostname of server
port 1194  ## default openvpn port
proto udp



#bridging directive
dev tap0  ## If you need multiple tap devices, add them here
up "/etc/openvpn/up.sh br0"
down "/etc/openvpn/down.sh br0"

persist-key
persist-tun

#certificates and encryption
ca ca.crt
cert server.crt
key server.key  # This file should be kept secret
dh dh1024.pem
tls-auth ta.key 0 # This file is secret

cipher BF-CBC        # Blowfish (default)
comp-lzo

#DHCP Information
ifconfig-pool-persist ipp.txt
server-bridge 172.16.4.89 255.255.255.0 172.16.4.3 172.16.4.4

#push "dhcp-option DNS dns1.kvikspace.com"
#push "dhcp-option DOMAIN kvikspace.com"

push "dhcp-option DNS localhost"
push "dhcp-option DOMAIN localhost"
max-clients 2 ## set this to the max number of clients that should be connected at a time

#log and security
user nobody
group nogroup
keepalive 10 120
status openvpn-status.log
verb 3

Links