applications/luci-openvpn/root/etc/config/openvpn_recipes

   1 #
   2 # Routed point-to-point server
   3 #
   4 config openvpn_recipe server_tun_ptp
   5         option _description     "Simple server configuration for a routed point-to-point VPN"
   6         option _role            "server"
   7         option dev                      "tun"
   8         option port                     "1194"
   9         option ifconfig         "10.0.0.1 10.0.0.2"
  10         option secret           "shared-secret.key"
  11
  12 #
  13 # Routed point-to-point client
  14 #
  15 config openvpn_recipe client_tun_ptp
  16         option _description     "Simple client configuration for a routed point-to-point VPN"
  17         option _role            "client"
  18         option dev                      "tun"
  19         list   remote           "mypeer.dyndns.org"
  20         option port             "1194"
  21         option ifconfig         "10.0.0.2 10.0.0.1"
  22         option secret           "shared-secret.key"
  23         option nobind           "1"
  24
  25
  26 #
  27 # Routed multi-client server
  28 #
  29 config openvpn_recipe server_tun
  30         option _description     "Server configuration for a routed multi-client VPN"
  31         option _role            "server"
  32         option dev                      "tun"
  33         option port                     "1194"
  34         option server           "10.0.100.0 255.255.255.0"
  35         option ca                       "ca.crt"
  36         option cert             "server.crt"
  37         option key                      "server.key"
  38         option dh                       "dh1024.pem"
  39         option client_to_client "1"
  40         option keepalive        "10 120"
  41         option comp_lzo         "1"
  42
  43 #
  44 # Routed client
  45 #
  46 config openvpn_recipe client_tun
  47         option _description     "Client configuration for a routed multi-client VPN"
  48         option _role            "client"
  49         option client           "1"
  50         option dev                      "tun"
  51         list   remote           "vpnserver.example.org 1194"
  52         option ca                       "ca.crt"
  53         option cert                     "my_client.crt"
  54         option key                      "my_client.key"
  55         option dh                       "dh1024.pem"
  56         option ns_cert_type     "server"
  57         option keepalive        "10 120"
  58         option comp_lzo         "1"
  59         option nobind           "1"
  60
  61
  62 #
  63 # Multi-client ethernet bridge server
  64 #
  65 config openvpn_recipe server_tap_bridge
  66         option _description     "Server configuration for an ethernet bridge VPN"
  67         option _role            "server"
  68         option dev                      "tap"
  69         option port                     "1194"
  70         option server_bridge "192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254"
  71         option ca                       "ca.crt"
  72         option cert             "server.crt"
  73         option key                      "server.key"
  74         option dh                       "dh1024.pem"
  75         option client_to_client "1"
  76         option keepalive        "10 120"
  77         option comp_lzo         "1"
  78
  79 #
  80 # Ethernet bridge client
  81 #
  82 config openvpn_recipe client_tap_bridge
  83         option _description     "Client configuration for an ethernet bridge VPN"
  84         option _role            "client"
  85         option client           "1"
  86         option dev                      "tap"
  87         list   remote           "vpnserver.example.org 1194"
  88         option ca                       "ca.crt"
  89         option cert                     "my_client.crt"
  90         option key                      "my_client.key"
  91         option dh                       "dh1024.pem"
  92         option ns_cert_type     "server"
  93         option keepalive        "10 120"
  94         option comp_lzo         "1"
  95         option nobind           "1"