[OpenVPN home] [Date Prev] [Date Index] [Date Next]
[OpenVPN mailing lists] [Thread Prev] [Thread Index] [Thread Next]
Google
 
Web openvpn.net

Re: [Openvpn-users] Windows Client


  • Subject: Re: [Openvpn-users] Windows Client
  • From: Doug Lytle <support@xxxxxxxxxx>
  • Date: Thu, 03 Feb 2005 19:23:56 -0500

Here is a working config from my server using TAP instead of TUN:

[server config - Mandrake Linux]

## Device Type
dev tap9

## Server mode
tls-server

## UDP Port
port 5015

## Change ROOT to the openvpn directory
chroot /etc/openvpn

## User and Group to run the process as
chroot /etc/openvpn
user nobody
group nogroup

## Client Configs
client-config-dir clients

## Server's Subnet
ifconfig 192.168.200.100 255.255.255.0

## Pool of Addresses available to clients
ifconfig-pool 192.168.200.101 192.168.200.151

## Authentication
dh certs/dh2048.pem

## Public Certificate Authority
ca certs/master-ca.crt

## Server's Public Certificate
cert certs/vpnserver.crt

## Server's Private Key
key certs/private/vpnserver.key

## Additional HMAC authentication
tls-auth certs/static.key

## Compression on
comp-lzo

## Restart Control

ping 15
ping-restart 45
ping-timer-rem
persist-tun
persist-key

## Log level
verb 4
mute 10

## Check for revoked client certificates
crl-verify crl/revoke.pem

## Multi-Client Server mode
mode server

## Routes to push to the clients

push "route 10.0.0.0 255.255.255.0"
push "route 192.168.100.0 255.255.255.0"
push "route 192.168.101.0 255.255.255.0"
push "route 192.168.102.0 255.255.255.0"
push "route 192.168.103.0 255.255.255.0"
push "route 192.168.104.0 255.255.255.0"
push "route 192.168.105.0 255.255.255.0"
push "route 192.168.106.0 255.255.255.0"
push "route 192.168.110.0 255.255.255.0"
push "route 192.168.112.0 255.255.255.0"
push "route 192.168.113.0 255.255.255.0"
push "route 192.168.115.0 255.255.255.0"
push "route 192.168.117.0 255.255.255.0"
push "route 192.168.119.0 255.255.255.0"

push "route-gateway 192.168.200.100"

## Additional options to push to clients
push "dhcp-option WINS 192.168.104.142"

## Where to put the log
log-append openvpn.log

## Status of Connections logged every 60 seconds
status connections.log 60

[client config - Windows 2000 Pro]

dev tap

## Remote Address
remote some.remote.ip.address

## Authorization type
tls-client

## Additional HMAC authentication
tls-auth static.key

## Public Certificate Authority
ca master-ca.crt

## Client's Public Certificate
cert d.lytle.laptop.crt

## Client's Private Key
key d.lytle.laptop.key

## Pull information from the VPN Server
pull

## VPN UDP Port
port 5015

## Restart Control
ping-restart 60
ping-timer-rem
resolv-retry 86400
ping 10

## Turn on compression
comp-lzo

## Log Level
verb 4
mute 10


Hope this helps.

Doug





____________________________________________
Openvpn-users mailing list
Openvpn-users@xxxxxxxxxxxxxxxxxxxxx
https://lists.sourceforge.net/lists/listinfo/openvpn-users