Last active
December 4, 2024 11:42
-
-
Save LuisPalacios/1ea5bccae15675b98d6cc133780b0fff to your computer and use it in GitHub Desktop.
Cliente de un tunel "Access Server" OpenVPN
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
# | |
# Configuración CLIENTE de un tunel "Access Server" OpenVPN | |
# Documentado en: | |
# https://www.luispa.com/linux/2014/10/19/bridge-ethernet.html | |
# | |
# Soy "cliente", expondré el device tun1 | |
client | |
dev tun1 | |
proto udp | |
# Datos del "Access Server" OpenVpn con el que conecto | |
remote norte.dominio.com 12345 | |
comp-lzo | |
resolv-retry 30 | |
nobind | |
persist-key | |
persist-tun | |
# Mis claves como cliente de norte | |
ca keys/sur_cliente_de_norte/norte.ca.crt | |
cert keys/sur_cliente_de_norte/sur_cliente_de_norte.crt | |
key keys/sur_cliente_de_norte/sur_cliente_de_norte.key | |
# Nivel extra de seguridad, firmo con HMAC el handshake SSL/TLS | |
tls-auth keys/sur_cliente_de_norte/norte.ta.key 1 | |
# Mis rutas en mi LAN que expongo al Servidor | |
push "route 192.168.107.0 255.255.255.0" | |
# Scripts para activar o desactivar el tunel | |
script-security 2 | |
up /etc/openvpn/client/sur_cliente_access_de_norte_UP.sh | |
down /etc/openvpn/client/sur_cliente_access_de_norte_DOWN.sh | |
# Ficheros de log y estado | |
status /etc/openvpn/client/sur_cliente_access_de_norte.status.log | |
log /etc/openvpn/client/sur_cliente_access_de_norte.log | |
verb 4 |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment