rendered paste body[root@muttley openvpn]# grep -Ev '^$|^#' server.conf
;local XXX.YYY.ZZZ.HHH
port 1194
;proto tcp
proto udp
;dev tap
dev tun
;dev-node MyTap
ca /etc/openvpn/certs/ca.crt
cert /etc/openvpn/certs/muttley.crt
key /etc/openvpn/certs/muttley.key # This file should be kept secret
dh /etc/openvpn/certs/dh1024.pem
server 10.0.254.0 255.255.255.0
ifconfig-pool-persist ipp.txt
;server-bridge 10.8.0.4 255.255.255.0 10.8.0.50 10.8.0.100
push "route 192.168.4.0 255.255.255.0"
;push "route 192.168.2.2 255.255.255.255"
;push "route 192.168.20.0 255.255.255.0"
;client-config-dir ccd
;route 192.168.40.128 255.255.255.248
client-config-dir /etc/openvpn/clients
route 192.168.3.0 255.255.255.0
route 192.168.7.0 255.255.255.0
route 192.168.8.0 255.255.255.0
route 192.168.9.0 255.255.255.0
route 192.168.10.0 255.255.255.0
route 192.168.11.0 255.255.255.0
route 192.168.12.0 255.255.255.0
route 192.168.13.0 255.255.255.0
route 192.168.14.0 255.255.255.0
route 192.168.15.0 255.255.255.0
route 192.168.16.0 255.255.255.0
route 192.168.17.0 255.255.255.0
route 192.168.18.0 255.255.255.0
route 192.168.19.0 255.255.255.0
route 192.168.100.0 255.255.255.0
route 192.168.101.0 255.255.255.0
;learn-address ./script
;push "redirect-gateway"
;push "dhcp-option DNS 10.8.0.1"
;push "dhcp-option WINS 10.8.0.1"
client-to-client
;duplicate-cn
keepalive 10 120
tls-auth certs/ta.key 0 # This file is secret
cipher BF-CBC # Blowfish (default)
;cipher AES-128-CBC # AES
;cipher DES-EDE3-CBC # Triple-DES
comp-lzo
;max-clients 100
user nobody
group nogroup
persist-key
persist-tun
status /var/log/openvpn-status.log
log /var/log/openvpn.log
;log-append openvpn.log
verb 3
mute 20
[root@muttley openvpn]#
[root@muttley openvpn]# cd clients/
[root@muttley clients]# cat flaviocj
ifconfig-push 10.0.254.254 10.0.254.253
push-reset
push "route 192.168.0.0 255.255.0.0"
[root@muttley clients]#
CLIENTE +------------
wakko:/etc/openvpn# grep -Ev '^$|^#' client.conf
client
;dev tap
dev tun
;dev-node MyTap
;proto tcp
proto udp
remote muttley.no-ip.org 1194
;remote my-server-2 1194
;remote-random
resolv-retry infinite
nobind
user nobody
group nogroup
persist-key
persist-tun
;http-proxy-retry # retry on connection failures
;http-proxy [proxy server] [proxy port #]
;mute-replay-warnings
ca certs/ca.crt
cert certs/pdtes-vitoria.crt
key certs/pdtes-vitoria.key
ns-cert-type server
tls-auth certs/ta.key 1
;cipher BFO-CFC
comp-lzo
verb 3
mute 20
wakko:/etc/openvpn#