Differences

This shows you the differences between two versions of the page.

--- doc:appunti:linux:sa:openvpn_easy_rsa [2024/01/10 16:30] – [Creazione della CA] niccolo
+++ doc:appunti:linux:sa:openvpn_easy_rsa [2024/01/24 16:39] (current) – [File di configurazione per il client] niccolo
@@ Line 97: / Line 97: @@
 <file>
+#---------------------------------------------------------------
+# OpenVPN configuration for Easy-RSA server.
+#---------------------------------------------------------------
 verb 3
 status /var/log/openvpn/openvpn-status.log
-port 1194
+lport 1194
 proto udp
 dev tun
@@ Line 121: / Line 124: @@
 ifconfig-pool-persist ipp.txt
 push "route-gateway 10.9.8.1"
+# Route only the the local LAN.
 push "route 192.168.0.0 255.255.255.0"
+# Route all the traffic through the VPN.
+#push "redirect-gateway autolocal"
 keepalive 10 120
@@ Line 190: / Line 196: @@
 pull
 remote 10.0.1.189 1194
+# Routing is pushed by the server.
+#route-gateway dhcp
+# Route only the remote LAN.
+#route 192.168.1.0 255.255.255.0 vpn_gateway
+# Route all the internet traffic through the VPN.
+#redirect-gateway autolocal
 remote-cert-tls server
 resolv-retry infinite
@@ Line 197: / Line 209: @@
 reneg-sec 60
 key-direction 1
-cipher AES-256-CBC
+# The --cipher option is used to connect OpenVPN older than 2.6.0.
+#cipher AES-256-CBC
+# Newer connections using TLS uses the --data-ciphers option.
+data-ciphers AES-256-GCM:AES-128-GCM
 auth SHA256
 auth-nocache