Created
November 11, 2018 00:16
-
-
Save mostlygeek/a167685f5f3184239d83dd34e48acb9c to your computer and use it in GitHub Desktop.
my edgerouter TCP 443 open vpn config
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
openvpn vtun1 { | |
firewall { | |
in { | |
name OVPN_IN | |
} | |
local { | |
name OVPN_LOCAL | |
} | |
out { | |
name OVPN_OUT | |
} | |
} | |
local-port 443 | |
mode server | |
openvpn-option --duplicate-cn | |
openvpn-option "--user nobody --group nogroup" | |
openvpn-option "--cipher AES-128-CBC" | |
openvpn-option --persist-key | |
openvpn-option "--push dhcp-option DNS 172.30.1.1" | |
protocol tcp-passive | |
server { | |
push-route 10.0.1.0/24 | |
push-route 10.0.2.0/24 | |
subnet 172.30.1.0/24 | |
topology subnet | |
} | |
tls { | |
ca-cert-file /config/auth/cacert.pem | |
cert-file /config/auth/server.pem | |
dh-file /config/auth/dhp.pem | |
key-file /config/auth/server-pem.key | |
} | |
} |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment