ak47suk1

unix client config

May 28th, 2011
205
Never
Not a member of Pastebin yet? Sign Up, it unlocks many cool features!
  1. ##############################################
  2. # Sample client-side OpenVPN 2.0 config file #
  3. # for connecting to multi-client server.     #
  4. #                                            #
  5. # This configuration can be used by multiple #
  6. # clients, however each client should have   #
  7. # its own cert and key files.                #
  8. #                                            #
  9. # On Windows, you might want to rename this  #
  10. # file so it has a .ovpn extension           #
  11. ##############################################
  12.  
  13. # Specify that we are a client and that we
  14. # will be pulling certain config file directives
  15. # from the server.
  16. client
  17.  
  18. # Use the same setting as you are using on
  19. # the server.
  20. # On most systems, the VPN will not function
  21. # unless you partially or fully disable
  22. # the firewall for the TUN/TAP interface.
  23. ;dev tap
  24. dev tun
  25.  
  26. # Windows needs the TAP-Win32 adapter name
  27. # from the Network Connections panel
  28. # if you have more than one.  On XP SP2,
  29. # you may need to disable the firewall
  30. # for the TAP adapter.
  31. ;dev-node MyVPN
  32.  
  33. # Are we connecting to a TCP or
  34. # UDP server?  Use the same setting as
  35. # on the server.
  36. proto tcp
  37. ;proto udp
  38.  
  39. port 443
  40.  
  41. # The hostname/IP and port of the server.
  42. # You can have multiple remote entries
  43. # to load balance between the servers.
  44. remote ip-server-di-dini
  45. ;remote my-server-2 1194
  46.  
  47. # Choose a random host from the remote
  48. # list for load-balancing.  Otherwise
  49. # try hosts in the order specified.
  50. ;remote-random
  51.  
  52. # Keep trying indefinitely to resolve the
  53. # host name of the OpenVPN server.  Very useful
  54. # on machines which are not permanently connected
  55. # to the internet such as laptops.
  56. resolv-retry infinite
  57.  
  58. # Most clients don't need to bind to
  59. # a specific local port number.
  60. nobind
  61.  
  62. # Downgrade privileges after initialization (non-Windows only)
  63. ;user nobody
  64. ;group nobody
  65.  
  66. # Try to preserve some state across restarts.
  67. persist-key
  68. persist-tun
  69.  
  70. # If you are connecting through an
  71. # HTTP proxy to reach the actual OpenVPN
  72. # server, put the proxy server/IP and
  73. # port number here.  See the man page
  74. # if your proxy server requires
  75. # authentication.
  76. ;http-proxy-retry # retry on connection failures
  77. ;http-proxy [proxy server] [proxy port #]
  78.  
  79. # Wireless networks often produce a lot
  80. # of duplicate packets.  Set this flag
  81. # to silence duplicate packet warnings.
  82. mute-replay-warnings
  83.  
  84. # SSL/TLS parms.
  85. # See the server config file for more
  86. # description.  It's best to use
  87. # a separate .crt/.key file pair
  88. # for each client.  A single ca
  89. # file can be used for all clients.
  90. ca ca.crt
  91. cert juarawira.crt
  92. key juarawira.key
  93.  
  94. # Verify server certificate by checking
  95. # that the certicate has the nsCertType
  96. # field set to "server".  This is an
  97. # important precaution to protect against
  98. # a potential attack discussed here:
  99. #  http://openvpn.net/howto.html#mitm
  100. #
  101. # To use this feature, you will need to generate
  102. # your server certificates with the nsCertType
  103. # field set to "server".  The build-key-server
  104. # script in the easy-rsa folder will do this.
  105. ;ns-cert-type server
  106.  
  107. # If a tls-auth key is used on the server
  108. # then every client must also have the key.
  109. ;tls-auth ta.key 1
  110.  
  111. # Select a cryptographic cipher.
  112. # If the cipher option is used on the server
  113. # then you must also specify it here.
  114. cipher AES-128-CBC
  115.  
  116. # Enable compression on the VPN link.
  117. # Don't enable this unless it is also
  118. # enabled in the server config file.
  119. comp-lzo
  120.  
  121. # Set log file verbosity.
  122. verb 1
  123.  
  124. # Silence repeating messages
  125. ;mute 20
RAW Paste Data