| 1 | server 10.199.0.0 255.255.0.0 |
|---|
| 2 | port 7077 |
|---|
| 3 | proto udp |
|---|
| 4 | dev tun0 |
|---|
| 5 | persist-key |
|---|
| 6 | persist-tun |
|---|
| 7 | |
|---|
| 8 | sndbuf 131072 |
|---|
| 9 | rcvbuf 131072 |
|---|
| 10 | txqueuelen 1000 |
|---|
| 11 | fast-io |
|---|
| 12 | |
|---|
| 13 | cipher AES-256-CBC |
|---|
| 14 | auth md5 |
|---|
| 15 | comp-lzo yes |
|---|
| 16 | tun-mtu 1500 |
|---|
| 17 | fragment 1300 |
|---|
| 18 | mssfix |
|---|
| 19 | |
|---|
| 20 | ca "/etc/openvpn/ca.crt" |
|---|
| 21 | cert "/etc/openvpn/server.crt" |
|---|
| 22 | key "/etc/openvpn/server.key" |
|---|
| 23 | dh "/etc/openvpn/dh2048.pem" |
|---|
| 24 | |
|---|
| 25 | push "redirect-gateway def1" |
|---|
| 26 | push "dhcp-option DNS 8.8.8.8" |
|---|
| 27 | push "comp-lzo yes" |
|---|
| 28 | |
|---|
| 29 | max-clients 500 |
|---|
| 30 | single-session |
|---|
| 31 | script-security 2 |
|---|
| 32 | ping 10 |
|---|
| 33 | ping-exit 60 |
|---|
| 34 | ping-timer-rem |
|---|
| 35 | |
|---|
| 36 | tmp-dir "/var/tmp/" |
|---|
| 37 | client-config-dir /var/openvpn/ccd_tun0 |
|---|
| 38 | status /var/openvpn/openvpn-udp.status |
|---|
| 39 | |
|---|
| 40 | # http://www.nongnu.org/radiusplugin/radiusplugin_v2.1.tar.gz |
|---|
| 41 | plugin /usr/lib/openvpn/radiusplugin.so /etc/openvpn/radiusplugin-udp.cnf |
|---|
| 42 | |
|---|
| 43 | management 127.0.0.1 2222 |
|---|
| 44 | user openvpn |
|---|
| 45 | group openvpn |
|---|
| 46 | |
|---|
| 47 | username-as-common-name |
|---|
| 48 | client-connect "/opt/bin/updown_c openvpn_up" |
|---|
| 49 | client-disconnect "/opt/bin/updown_c openvpn_down" |
|---|
| 50 | |
|---|
| 51 | |
|---|
