Changeset 10432 in hybrid for branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn

Timestamp:

Apr 12, 2012, 6:27:00 AM (13 years ago)

Author:

rick

Message:

OpenVPN client configuration file, modified (dry coded) to be used from Wireless Leiden.

File:

• branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn/client.conf (modified) (4 diffs)

branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn/client.conf

@@ -21 +21 @@
 # unless you partially or fully disable
 # the firewall for the TUN/TAP interface.
-;dev tap
-dev tun
+dev tap0
+;dev tun
 
 # Windows needs the TAP-Win32 adapter name
@@ -40 +40 @@
 # You can have multiple remote entries
 # to load balance between the servers.
-remote my-server-1 1194
+;remote my-server-1 1194
 ;remote my-server-2 1194
+remote openvpn.network.wirelessleiden.nl 1194
 
 # Choose a random host from the remote
@@ -86 +87 @@
 # for each client.  A single ca
 # file can be used for all clients.
-ca ca.crt
-cert client.crt
-key client.key
+ca /usr/local/etc/openvpn/ca.crt
+cert /usr/local/etc/openvpn/client.crt
+key /usr/local/etc/openvpn/client.key
 
 # Verify server certificate by checking
@@ -122 +123 @@
 # Silence repeating messages
 ;mute 20
+
+# Use syslog by default
+syslog
+
+# Allow calling external scripts
+script-security 2
+
+# Make sure to keep some traffic running, to keep the Firewall (NAT) state tables in between happy.
+keepalive 2 24