Skip to content

Instantly share code, notes, and snippets.

@mostlygeek
Created November 11, 2018 00:16
Show Gist options
  • Save mostlygeek/a167685f5f3184239d83dd34e48acb9c to your computer and use it in GitHub Desktop.
Save mostlygeek/a167685f5f3184239d83dd34e48acb9c to your computer and use it in GitHub Desktop.
my edgerouter TCP 443 open vpn config
openvpn vtun1 {
firewall {
in {
name OVPN_IN
}
local {
name OVPN_LOCAL
}
out {
name OVPN_OUT
}
}
local-port 443
mode server
openvpn-option --duplicate-cn
openvpn-option "--user nobody --group nogroup"
openvpn-option "--cipher AES-128-CBC"
openvpn-option --persist-key
openvpn-option "--push dhcp-option DNS 172.30.1.1"
protocol tcp-passive
server {
push-route 10.0.1.0/24
push-route 10.0.2.0/24
subnet 172.30.1.0/24
topology subnet
}
tls {
ca-cert-file /config/auth/cacert.pem
cert-file /config/auth/server.pem
dh-file /config/auth/dhp.pem
key-file /config/auth/server-pem.key
}
}
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment