Changeset 11543 in hybrid for branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn

Timestamp:

Oct 10, 2012, 9:43:35 PM (12 years ago)

Author:

rick

Message:

Make the concentrator OpenVPN work. Please do mind that it potentially breaks
the code for external interfaces which also have an internal link on it (like
the watertoren setup) and no concentrator setup.

Location:

branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn

Files:

• README (added)
• ca.crt (added)
• client.conf (modified) (5 diffs)

branches/releng-9.0/nanobsd/files/usr/local/etc/openvpn/client.conf

@@ -10 +10 @@
 # file so it has a .ovpn extension           #
 ##############################################
-
 # Specify that we are a client and that we
 # will be pulling certain config file directives
@@ -21 +20 @@
 # unless you partially or fully disable
 # the firewall for the TUN/TAP interface.
-dev tap0
-;dev tun
+dev tun
 
 # Windows needs the TAP-Win32 adapter name
@@ -42 +40 @@
 ;remote my-server-1 1194
 ;remote my-server-2 1194
-remote openvpn.network.wirelessleiden.nl 1194
+remote openvpn.pool.wirelessleiden.nl. 1194
 
 # Choose a random host from the remote
@@ -106 +104 @@
 # If a tls-auth key is used on the server
 # then every client must also have the key.
-;tls-auth ta.key 1
+tls-auth /usr/local/etc/openvpn/ta.key 1
 
 # Select a cryptographic cipher.
@@ -132 +130 @@
 # Make sure to keep some traffic running, to keep the Firewall (NAT) state tables in between happy.
 keepalive 2 24
+
+# Keep trying
+resolv-retry infinite