Advertisement
Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- opkg update; opkg install openvpn-mbedtls luci-app-openvpn
- cat << 'EOF' > /etc/openvpn/pia-login.pem
- username
- password
- EOF
- cat << 'EOF' > /etc/openvpn/pia-crl-2048.pem
- -----BEGIN X509 CRL-----
- MIICWDCCAUAwDQYJKoZIhvcNAQENBQAwgegxCzAJBgNVBAYTAlVTMQswCQYDVQQI
- EwJDQTETMBEGA1UEBxMKTG9zQW5nZWxlczEgMB4GA1UEChMXUHJpdmF0ZSBJbnRl
- cm5ldCBBY2Nlc3MxIDAeBgNVBAsTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAw
- HgYDVQQDExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UEKRMXUHJpdmF0
- ZSBJbnRlcm5ldCBBY2Nlc3MxLzAtBgkqhkiG9w0BCQEWIHNlY3VyZUBwcml2YXRl
- aW50ZXJuZXRhY2Nlc3MuY29tFw0xNjA3MDgxOTAwNDZaFw0zNjA3MDMxOTAwNDZa
- MCYwEQIBARcMMTYwNzA4MTkwMDQ2MBECAQYXDDE2MDcwODE5MDA0NjANBgkqhkiG
- 9w0BAQ0FAAOCAQEAQZo9X97ci8EcPYu/uK2HB152OZbeZCINmYyluLDOdcSvg6B5
- jI+ffKN3laDvczsG6CxmY3jNyc79XVpEYUnq4rT3FfveW1+Ralf+Vf38HdpwB8EW
- B4hZlQ205+21CALLvZvR8HcPxC9KEnev1mU46wkTiov0EKc+EdRxkj5yMgv0V2Re
- ze7AP+NQ9ykvDScH4eYCsmufNpIjBLhpLE2cuZZXBLcPhuRzVoU3l7A9lvzG9mjA
- 5YijHJGHNjlWFqyrn1CfYS6koa4TGEPngBoAziWRbDGdhEgJABHrpoaFYaL61zqy
- MR6jC0K2ps9qyZAN74LEBedEfK7tBOzWMwr58A==
- -----END X509 CRL-----
- EOF
- cat << 'EOF' > /etc/openvpn/pia-ca-2048.crt
- -----BEGIN CERTIFICATE-----
- MIIFqzCCBJOgAwIBAgIJAKZ7D5Yv87qDMA0GCSqGSIb3DQEBDQUAMIHoMQswCQYD
- VQQGEwJVUzELMAkGA1UECBMCQ0ExEzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNV
- BAoTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIElu
- dGVybmV0IEFjY2VzczEgMB4GA1UEAxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3Mx
- IDAeBgNVBCkTF1ByaXZhdGUgSW50ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkB
- FiBzZWN1cmVAcHJpdmF0ZWludGVybmV0YWNjZXNzLmNvbTAeFw0xNDA0MTcxNzM1
- MThaFw0zNDA0MTIxNzM1MThaMIHoMQswCQYDVQQGEwJVUzELMAkGA1UECBMCQ0Ex
- EzARBgNVBAcTCkxvc0FuZ2VsZXMxIDAeBgNVBAoTF1ByaXZhdGUgSW50ZXJuZXQg
- QWNjZXNzMSAwHgYDVQQLExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4GA1UE
- AxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBCkTF1ByaXZhdGUgSW50
- ZXJuZXQgQWNjZXNzMS8wLQYJKoZIhvcNAQkBFiBzZWN1cmVAcHJpdmF0ZWludGVy
- bmV0YWNjZXNzLmNvbTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPXD
- L1L9tX6DGf36liA7UBTy5I869z0UVo3lImfOs/GSiFKPtInlesP65577nd7UNzzX
- lH/P/CnFPdBWlLp5ze3HRBCc/Avgr5CdMRkEsySL5GHBZsx6w2cayQ2EcRhVTwWp
- cdldeNO+pPr9rIgPrtXqT4SWViTQRBeGM8CDxAyTopTsobjSiYZCF9Ta1gunl0G/
- 8Vfp+SXfYCC+ZzWvP+L1pFhPRqzQQ8k+wMZIovObK1s+nlwPaLyayzw9a8sUnvWB
- /5rGPdIYnQWPgoNlLN9HpSmsAcw2z8DXI9pIxbr74cb3/HSfuYGOLkRqrOk6h4RC
- OfuWoTrZup1uEOn+fw8CAwEAAaOCAVQwggFQMB0GA1UdDgQWBBQv63nQ/pJAt5tL
- y8VJcbHe22ZOsjCCAR8GA1UdIwSCARYwggESgBQv63nQ/pJAt5tLy8VJcbHe22ZO
- sqGB7qSB6zCB6DELMAkGA1UEBhMCVVMxCzAJBgNVBAgTAkNBMRMwEQYDVQQHEwpM
- b3NBbmdlbGVzMSAwHgYDVQQKExdQcml2YXRlIEludGVybmV0IEFjY2VzczEgMB4G
- A1UECxMXUHJpdmF0ZSBJbnRlcm5ldCBBY2Nlc3MxIDAeBgNVBAMTF1ByaXZhdGUg
- SW50ZXJuZXQgQWNjZXNzMSAwHgYDVQQpExdQcml2YXRlIEludGVybmV0IEFjY2Vz
- czEvMC0GCSqGSIb3DQEJARYgc2VjdXJlQHByaXZhdGVpbnRlcm5ldGFjY2Vzcy5j
- b22CCQCmew+WL/O6gzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBDQUAA4IBAQAn
- a5PgrtxfwTumD4+3/SYvwoD66cB8IcK//h1mCzAduU8KgUXocLx7QgJWo9lnZ8xU
- ryXvWab2usg4fqk7FPi00bED4f4qVQFVfGfPZIH9QQ7/48bPM9RyfzImZWUCenK3
- 7pdw4Bvgoys2rHLHbGen7f28knT2j/cbMxd78tQc20TIObGjo8+ISTRclSTRBtyC
- GohseKYpTS9himFERpUgNtefvYHbn70mIOzfOJFTVqfrptf9jXa9N8Mpy3ayfodz
- 1wiqdteqFXkTYoSDctgKMiZ6GdocK9nMroQipIQtpnwd4yBDWIyC6Bvlkrq5TQUt
- YDQ8z9v+DMO6iwyIDRiU
- -----END CERTIFICATE-----
- EOF
- chmod 0400 /etc/openvpn/pia-login.pem
- uci del openvpn.custom_config
- uci del openvpn.sample_server
- uci del openvpn.sample_client
- uci set openvpn.pia='openvpn'
- uci set openvpn.pia.enabled='1'
- uci set openvpn.pia.client='1'
- uci set openvpn.pia.dev_type='tun'
- uci set openvpn.pia.dev='ovpnc0'
- uci set openvpn.pia.resolv_retry='infinite'
- uci set openvpn.pia.nobind='1'
- uci set openvpn.pia.persist_key='1'
- uci set openvpn.pia.persist_tun='1'
- uci set openvpn.pia.tls_client='1'
- uci set openvpn.pia.remote_cert_tls='server'
- uci set openvpn.pia.ca='/etc/openvpn/pia-ca-2048.crt'
- uci set openvpn.pia.crl_verify='/etc/openvpn/pia-crl-2048.pem'
- uci set openvpn.pia.auth_user_pass='/etc/openvpn/pia-login.pem'
- uci set openvpn.pia.auth_nocache='1'
- uci set openvpn.pia.auth_retry='interact'
- uci set openvpn.pia.pull_filter='ignore "auth-token"'
- uci set openvpn.pia.comp_lzo='yes'
- uci set openvpn.pia.verb='1'
- uci set openvpn.pia.reneg_sec='0'
- uci set openvpn.pia.keepalive='10 60'
- uci set openvpn.pia.float='1'
- uci set openvpn.pia.auth='SHA1'
- uci set openvpn.pia.cipher='AES-128-CBC'
- uci set openvpn.pia.disable_occ='1'
- uci set openvpn.pia.proto='udp'
- uci add_list openvpn.pia.remote='us-seattle.privateinternetaccess.com 1198'
- uci set openvpn.pia.mute_replay_warnings='1'
- uci commit openvpn
- uci set network.pia='interface'
- uci set network.pia.proto='none'
- uci set network.pia.ifname='ovpnc0'
- uci commit network
- uci add firewall zone
- uci set firewall.@zone[-1].name='pia'
- uci set firewall.@zone[-1].network='pia'
- uci set firewall.@zone[-1].input='REJECT'
- uci set firewall.@zone[-1].forward='REJECT'
- uci set firewall.@zone[-1].output='ACCEPT'
- uci set firewall.@zone[-1].masq='1'
- uci set firewall.@zone[-1].mtu_fix='1'
- uci add firewall forwarding
- uci set firewall.@forwarding[-1].src='lan'
- uci set firewall.@forwarding[-1].dest='pia'
- uci commit firewall
Advertisement
Add Comment
Please, Sign In to add comment
Advertisement