|
@@ -4,13 +4,12 @@ dev external
|
|
dev-type tun
|
|
dev-type tun
|
|
ca /etc/openvpn/keys/ca.crt
|
|
ca /etc/openvpn/keys/ca.crt
|
|
cert /etc/openvpn/keys/server.crt
|
|
cert /etc/openvpn/keys/server.crt
|
|
-key /etc/openvpn/keys/server.key
|
|
|
|
|
|
+key /etc/openvpn/keys/server.key
|
|
dh /etc/openvpn/keys/dh2048.pem
|
|
dh /etc/openvpn/keys/dh2048.pem
|
|
crl-verify /etc/openvpn/persist/stonevpn.crl
|
|
crl-verify /etc/openvpn/persist/stonevpn.crl
|
|
tls-auth /etc/openvpn/keys/ta.key 0
|
|
tls-auth /etc/openvpn/keys/ta.key 0
|
|
server 10.10.20.0 255.255.255.0
|
|
server 10.10.20.0 255.255.255.0
|
|
route 10.10.0.0 255.255.0.0
|
|
route 10.10.0.0 255.255.0.0
|
|
-route 192.168.21.0 255.255.255.0
|
|
|
|
route 192.168.26.0 255.255.255.0
|
|
route 192.168.26.0 255.255.255.0
|
|
push "route 192.168.200.0 255.255.248.0"
|
|
push "route 192.168.200.0 255.255.248.0"
|
|
push "route 10.9.0.0 255.255.0.0"
|
|
push "route 10.9.0.0 255.255.0.0"
|
|
@@ -22,6 +21,7 @@ user openvpn
|
|
group openvpn
|
|
group openvpn
|
|
persist-key
|
|
persist-key
|
|
persist-tun
|
|
persist-tun
|
|
-#status /var/log/openvpn-status.log
|
|
|
|
|
|
+status /var/log/openvpn-status.log
|
|
topology subnet
|
|
topology subnet
|
|
verb 3
|
|
verb 3
|
|
|
|
+management localhost 7505
|