SHOW:
|
|
- or go back to the newest paste.
| 1 | - | client.conf |
| 1 | + | |
| 2 | ||
| 3 | - | # Custom user conf file for OpenVPN client |
| 3 | + | |
| 4 | ||
| 5 | # Custom user conf file for OpenVPN server | |
| 6 | - | ### If your server certificates with the nsCertType field set to "server" |
| 6 | + | |
| 7 | - | ns-cert-type server |
| 7 | + | |
| 8 | ### Authenticate packets with HMAC using message digest algorithm | |
| 9 | ;auth SHA1 # SHA1 160 bit (default) | |
| 10 | - | nice 0 |
| 10 | + | auth SHA256 # SHA256 256 bit |
| 11 | ;auth SHA512 # SHA512 512 bit | |
| 12 | ||
| 13 | - | verb 0 |
| 13 | + | |
| 14 | - | mute 10 |
| 14 | + | ;cipher BF-CBC # Blowfish 128 bit (default) |
| 15 | cipher AES-128-CBC # AES 128 bit | |
| 16 | ;cipher AES-256-CBC # AES 256 bit | |
| 17 | ;cipher DES-EDE3-CBC # Triple-DES 192 bit | |
| 18 | - | ================= |
| 18 | + | |
| 19 | ||
| 20 | ### Enable LZO compression on the VPN link | |
| 21 | comp-lzo | |
| 22 | ||
| 23 | ### Max clients limit | |
| 24 | max-clients 10 | |
| 25 | ||
| 26 | ### Internally route client-to-client traffic | |
| 27 | - | auth SHA1 # SHA1 160 bit (default) |
| 27 | + | ;client-to-client |
| 28 | - | ;auth SHA256 # SHA256 256 bit |
| 28 | + | |
| 29 | ### Allow clients with duplicate "Common Name" | |
| 30 | ;duplicate-cn | |
| 31 | ||
| 32 | - | cipher BF-CBC # Blowfish 128 bit (default) |
| 32 | + | |
| 33 | - | ;cipher AES-128-CBC # AES 128 bit |
| 33 | + | |
| 34 | ||
| 35 | ### Process priority level (0..19) | |
| 36 | ;nice 3 | |
| 37 | ||
| 38 | ### Syslog verbose level | |
| 39 | verb 4 | |
| 40 | mute 20 | |
| 41 | ||
| 42 | ============================== | |
| 43 | ||
| 44 | OVPN file | |
| 45 | - | client-to-client |
| 45 | + | все что ниже вставить в client.ovpn |
| 46 | ============================== | |
| 47 | ||
| 48 | client | |
| 49 | ||
| 50 | ||
| 51 | dev tap | |
| 52 | #dev tun | |
| 53 | ||
| 54 | - | nice 3 |
| 54 | + | |
| 55 | # from the Network Connections panel | |
| 56 | # if you have more than one. On XP SP2, | |
| 57 | - | verb 0 |
| 57 | + | |
| 58 | - | mute 10 |
| 58 | + | |
| 59 | # dev-node TAP | |
| 60 | ||
| 61 | # Are we connecting to a TCP or | |
| 62 | # UDP server? Use the same setting as | |
| 63 | # on the server. | |
| 64 | - | ############################################## |
| 64 | + | |
| 65 | - | # Sample client-side OpenVPN 2.0 config file # |
| 65 | + | ;proto udp |
| 66 | - | # for connecting to multi-client server. # |
| 66 | + | |
| 67 | - | # # |
| 67 | + | |
| 68 | - | # This configuration can be used by multiple # |
| 68 | + | |
| 69 | - | # clients, however each client should have # |
| 69 | + | |
| 70 | - | # its own cert and key files. # |
| 70 | + | |
| 71 | - | # # |
| 71 | + | |
| 72 | - | # On Windows, you might want to rename this # |
| 72 | + | |
| 73 | - | # file so it has a .ovpn extension # |
| 73 | + | |
| 74 | - | ############################################## |
| 74 | + | |
| 75 | # try hosts in the order specified. | |
| 76 | - | # Specify that we are a client and that we |
| 76 | + | |
| 77 | - | # will be pulling certain config file directives |
| 77 | + | |
| 78 | - | # from the server. |
| 78 | + | |
| 79 | # host name of the OpenVPN server. Very useful | |
| 80 | # on machines which are not permanently connected | |
| 81 | - | # Use the same setting as you are using on |
| 81 | + | |
| 82 | - | # the server. |
| 82 | + | |
| 83 | - | # On most systems, the VPN will not function |
| 83 | + | |
| 84 | - | # unless you partially or fully disable |
| 84 | + | |
| 85 | - | # the firewall for the TUN/TAP interface. |
| 85 | + | |
| 86 | nobind | |
| 87 | ||
| 88 | # Downgrade privileges after initialization (non-Windows only) | |
| 89 | ;user nobody | |
| 90 | ;group nobody | |
| 91 | ||
| 92 | # Try to preserve some state across restarts. | |
| 93 | persist-key | |
| 94 | - | dev-node TAP |
| 94 | + | |
| 95 | ||
| 96 | # Wireless networks often produce a lot | |
| 97 | # of duplicate packets. Set this flag | |
| 98 | # to silence duplicate packet warnings. | |
| 99 | ;mute-replay-warnings | |
| 100 | - | #proto udp |
| 100 | + | |
| 101 | auth SHA256 | |
| 102 | remote-cert-tls server | |
| 103 | cipher AES-128-CBC | |
| 104 | comp-lzo | |
| 105 | verb 3 | |
| 106 | mute 20 | |
| 107 | ||
| 108 | key-direction 1 | |
| 109 | ||
| 110 | #### сюда (между <ca> и </ca>) вставляешь содержимое файла ca.crt #### | |
| 111 | <ca> | |
| 112 | ||
| 113 | </ca> | |
| 114 | ||
| 115 | ##### сюда (между <cert> и </cert>) вставляешь содержимое client.crt #### | |
| 116 | <cert> | |
| 117 | ||
| 118 | </cert> | |
| 119 | ||
| 120 | #### сюда (между <key> и </key>) содержимое client.key #### | |
| 121 | <key> | |
| 122 | ||
| 123 | </key> | |
| 124 | ||
| 125 | #### сюда (между <tls-auth> и </tls-auth>) ta.key #### | |
| 126 | ||
| 127 | <tls-auth> | |
| 128 | ||
| 129 | </tls-auth> |