95
1. 8 7 7. 8 7 7. 2 26 9 BLACKBOX.COM
NEED HELP?
LEAVE THE TECH TO US
LIVE 24/7
TECHNICAL
SUPPORT
1.877.87 7.2269
dev tun
ca c:\\openvpnkeys\\ca.crt
cert c:\\openvpnkeys\\server.crt
key c:\\openvpnkeys\\server.key
dh c:\\openvpnkeys\\dh.pem
comp-lzo
verb 1
syslog LES1416A_OpenVPN_Server
The Windows client/server configuration file options are listed in the next table:
TABLE 5-5. WINDOWS CLIENT/SERVER CONFIGURATION FILE OPTIONS
OPTION DESCRIPTION
# comments and notes Lines beginning with # are ignored by OpenVPN.
client or server
Specify whether this will be a client or server configuration file. In the server configuration file, define the IP
address pool and netmask. For example: server 10.100.10.0 255.255.255.0
proto [udp | tcp] Set the protocol. Client and server must be the same.
mssfix size Set a packet’s maximum size. Only useful for UDP if problems occur.
verb level
Set log-file verbosity. Values range from 0–15.
0 = silent except for fatal errors.
3 = medium output logging. Good for general use.
5 = helps with debugging connection problems.
9 = extremely verbose. Excellent for troubleshooting.
dev [tun | tap]
Set dev tun to create a routed IP tunnel.
Set dev tup to create an Ethernet tunnel.
Client and server must be the same.
remote host
Set the hostname or IP address of the OpenVPN server.
Mandatory but a client-only setting.
Port The UDP or TCP port of the OpenVPN server.
Keepalive ping-value down-value
Uses ping to keep the OpenVPN session alive.
For example:
Keepalive 10 120
pings the server every ten seconds and assumes the remote peer is down if no ping is received after 120
seconds (two minutes).
ca file-name
Enter the CA certificate file name and location
The same CA certificate can be used by the server and all clients.
Ensure each \ in the directory path is escaped.
For example:
c:\openvpnkeys\ca.crt
must be entered as:
c:\\openvpnkeys\\ca.crt
CHAPTER 5: SERIAL PORT, HOST DEVICE AND USER CONFIG