#
# Sample OpenVPN configuration file for
# office using a pre-shared static key.
#
# '#' or ';' may be used to delimit comments.
# Use a dynamic tun device.
# For Linux 2.2 or non-Linux OSes,
# you may want to use an explicit
# unit number such as "tun1".
# OpenVPN also supports virtual
# ethernet "tap" devices.
dev tun
remote 82.235.186.51
# 10.1.0.1 is our local VPN endpoint (office).
# 10.1.0.2 is our remote VPN endpoint (home).
ifconfig 10.4.0.2 10.4.0.1
# Our up script will establish routes
# once the VPN is alive.
up /etc/openvpn/home.up.sh
# Our pre-shared static key
; secret pingoo.key
# SLL mode
ca /etc/ssl/crt/ca.swinny.pem
cert /etc/ssl/crt/vpn.pingoo.crt
key /etc/ssl/key/vpn.pingoo.key
tls-client
# OpenVPN uses UDP port 5000 by default.
# Each OpenVPN tunnel must use
# a different port number.
# lport or rport can be used
# to denote different ports
# for local and remote.
port 65535
# Downgrade UID and GID to
# "nobody" after initialization
# for extra security.
user nobody
; group nobody
# If you built OpenVPN with
# LZO compression, uncomment
# out the following line.
;comp-lzo
# Send a UDP ping to remote once
# every 15 seconds to keep
# stateful firewall connection
# alive. Uncomment this
# out if you are using a stateful
# firewall.
; ping 15
# Uncomment this section for a more reliable detection when a system
# loses its connection. For example, dial-ups or laptops that
# travel to other locations.
ping 15
ping-restart 45
ping-timer-rem
persist-tun
persist-key
# Verbosity level.
# 0 -- quiet except for fatal errors.
# 1 -- mostly quiet, but display non-fatal network errors.
# 3 -- medium output, good for normal operation.
# 9 -- verbose, good for troubleshooting
verb 3
tun-mtu 1492
mssfix 1400