local 10.xx.xx.xx
port PORT_NUMBER
proto udp
dev tun
ca /YOUR_CA_DIR/ca.crt
cert /YOUR_CA_DIR/key-server.crt
key /YOUR_CA_DIR/key-server.key
dh /YOUR_CA_DIR/dh1024.pem
cipher AES-128-CBC # AES is faster than BF
max-routes 3000
ifconfig-pool-persist ipp.txt
server 10.168.1.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 208.67.220.220" # OpenDNS.
push "dhcp-option DNS 208.67.222.222"
client-to-client
duplicate-cn
keepalive 10 60
comp-lzo
max-clients 10
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
mute 20
port PORT_NUMBER
proto udp
dev tun
ca /YOUR_CA_DIR/ca.crt
cert /YOUR_CA_DIR/key-server.crt
key /YOUR_CA_DIR/key-server.key
dh /YOUR_CA_DIR/dh1024.pem
cipher AES-128-CBC # AES is faster than BF
max-routes 3000
ifconfig-pool-persist ipp.txt
server 10.168.1.0 255.255.255.0
push "redirect-gateway"
push "dhcp-option DNS 208.67.220.220" # OpenDNS.
push "dhcp-option DNS 208.67.222.222"
client-to-client
duplicate-cn
keepalive 10 60
comp-lzo
max-clients 10
persist-key
persist-tun
status openvpn-status.log
log-append openvpn.log
verb 3
mute 20
Client (MAC OS X)
remote SERVER_IP SERVER_PORT udp
persist-key
tls-client
pull
ca ca.crt
redirect-gateway def1
dev tun
persist-tun
cert cert.crt
comp-lzo no
nobind
key key.key
remote-cert-tls server
script-security 2
cipher AES-128-CBC
persist-key
tls-client
pull
ca ca.crt
redirect-gateway def1
dev tun
persist-tun
cert cert.crt
comp-lzo no
nobind
key key.key
remote-cert-tls server
script-security 2
cipher AES-128-CBC
没有评论:
发表评论