summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-openvpn/luasrc
diff options
context:
space:
mode:
Diffstat (limited to 'applications/luci-app-openvpn/luasrc')
-rw-r--r--applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua35
1 files changed, 27 insertions, 8 deletions
diff --git a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
index 03ce38e9d2..656aeedf9a 100644
--- a/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
+++ b/applications/luci-app-openvpn/luasrc/model/cbi/openvpn-advanced.lua
@@ -187,6 +187,10 @@ local knownParams = {
"rport",
1194,
translate("TCP/UDP port # for remote (default=1194)") },
+ { ListValue,
+ "proto",
+ { "udp", "tcp-client", "tcp-server" },
+ translate("Use protocol") },
{ Flag,
"float",
0,
@@ -195,6 +199,10 @@ local knownParams = {
"nobind",
0,
translate("Do not bind to local address and port") },
+ { Flag,
+ "multihome",
+ 0,
+ translate("When you have more than one IP address (e.g. multiple interfaces, or secondary IP addresses), and do not use --local to force binding to one specific address only") },
{ Value,
"dev",
"tun0",
@@ -279,7 +287,7 @@ local knownParams = {
{ proto="udp" } },
{ Value,
"mssfix",
- 1500,
+ 1450,
translate("Set upper bound on TCP MSS"),
{ proto="udp" } },
{ Value,
@@ -363,6 +371,10 @@ local knownParams = {
{ "net30", "p2p", "subnet" },
translate("'net30', 'p2p', or 'subnet'"),
{dev_type="tun" } },
+ { Flag,
+ "disable_dco",
+ 0,
+ translate("Disable Data Channel Offloading (DCO) support") },
} },
{ "vpn", translate("VPN"), {
@@ -504,11 +516,6 @@ local knownParams = {
0,
translate("Randomly choose remote server"),
{ client="1" } },
- { ListValue,
- "proto",
- { "udp", "tcp-client", "tcp-server" },
- translate("Use protocol"),
- { client="1" } },
{ Value,
"connect_retry",
5,
@@ -794,9 +801,21 @@ local knownParams = {
"ncp_disable",
0,
translate("This completely disables cipher negotiation") },
- { Value,
+ { DynamicList,
"ncp_ciphers",
- "AES-256-GCM:AES-128-GCM",
+ {
+ "AES-256-GCM",
+ "AES-128-GCM"
+ },
+ translate("Restrict the allowed ciphers to be negotiated") },
+ { DynamicList,
+ "data_ciphers",
+ {
+ "CHACHA20-POLY1305",
+ "AES-256-GCM",
+ "AES-128-GCM",
+ "AES-256-CBC"
+ },
translate("Restrict the allowed ciphers to be negotiated") },
} }
}