summaryrefslogtreecommitdiffhomepage
path: root/applications/luci-app-openvpn/root/etc
diff options
context:
space:
mode:
Diffstat (limited to 'applications/luci-app-openvpn/root/etc')
-rw-r--r--applications/luci-app-openvpn/root/etc/config/openvpn_recipes102
1 files changed, 102 insertions, 0 deletions
diff --git a/applications/luci-app-openvpn/root/etc/config/openvpn_recipes b/applications/luci-app-openvpn/root/etc/config/openvpn_recipes
new file mode 100644
index 0000000000..1b394dffbc
--- /dev/null
+++ b/applications/luci-app-openvpn/root/etc/config/openvpn_recipes
@@ -0,0 +1,102 @@
+#
+# Routed point-to-point server
+#
+config openvpn_recipe server_tun_ptp
+ option _description "Simple server configuration for a routed point-to-point VPN"
+ option _role "server"
+ option dev "tun"
+ option ifconfig "10.0.0.1 10.0.0.2"
+ option secret "shared-secret.key"
+ option keepalive "10 60"
+ option comp_lzo "yes"
+ option verb "3"
+ option mssfix "1420"
+
+#
+# Routed point-to-point client
+#
+config openvpn_recipe client_tun_ptp
+ option _description "Simple client configuration for a routed point-to-point VPN"
+ option _role "client"
+ option dev "tun"
+ list remote "vpnserver.example.org"
+ option ifconfig "10.0.0.2 10.0.0.1"
+ option secret "shared-secret.key"
+ option nobind "1"
+ option comp_lzo "yes"
+ option verb "3"
+
+#
+# Routed multi-client server
+#
+config openvpn_recipe server_tun
+ option _description "Server configuration for a routed multi-client VPN"
+ option _role "server"
+ option dev "tun"
+ option server "10.0.100.0 255.255.255.0"
+ option ca "ca.crt"
+ option cert "server.crt"
+ option key "server.key"
+ option dh "dh1024.pem"
+ option keepalive "10 60"
+ option comp_lzo "yes"
+ option verb "3"
+ option mssfix "1420"
+
+#
+# Routed client
+#
+config openvpn_recipe client_tun
+ option _description "Client configuration for a routed multi-client VPN"
+ option _role "client"
+ option client "1"
+ option dev "tun"
+ list remote "vpnserver.example.org"
+ option pkcs12 "my_client.p12"
+ option remote_cert_tls "server"
+ option comp_lzo "yes"
+ option nobind "1"
+ option persist_key "1"
+ option persist_tun "1"
+ option verb "3"
+ option reneg_sec "0"
+ option float "1"
+
+#
+# Multi-client ethernet bridge server
+#
+config openvpn_recipe server_tap_bridge
+ option _description "Server configuration for an ethernet bridge VPN"
+ option _role "server"
+ option dev "tap"
+ option server_bridge "192.168.1.1 255.255.255.0 192.168.1.128 192.168.1.254"
+ option ca "ca.crt"
+ option cert "server.crt"
+ option key "server.key"
+ option dh "dh1024.pem"
+ option keepalive "10 60"
+ option comp_lzo "yes"
+ option verb "3"
+ option mssfix "1420"
+
+#
+# Ethernet bridge client
+#
+config openvpn_recipe client_tap_bridge
+ option _description "Client configuration for an ethernet bridge VPN"
+ option _role "client"
+ option client "1"
+ option dev "tap"
+ list remote "vpnserver.example.org"
+ option ca "ca.crt"
+ option cert "my_client.crt"
+ option key "my_client.key"
+ option dh "dh1024.pem"
+ option remote_cert_tls "server"
+ option comp_lzo "yes"
+ option nobind "1"
+ option persist_key "1"
+ option verb "3"
+ option reneg_sec "0"
+ option float "1"
+