09898ccca3bfd6f09332c61bbbdc5b376344329c
howto/openvpn.md
| ... | ... | @@ -11,7 +11,6 @@ |
| 11 | 11 | |
| 12 | 12 | ``` |
| 13 | 13 | #/etc/openvpn/<PEER_NAME> |
| 14 | -daemon |
|
| 15 | 14 | proto <PROTO> |
| 16 | 15 | mode p2p |
| 17 | 16 | remote <REMOTE_HOST> |
| ... | ... | @@ -26,7 +25,8 @@ comp-lzo |
| 26 | 25 | persist-key |
| 27 | 26 | persist-tun |
| 28 | 27 | cipher aes-256-cbc |
| 29 | -ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 28 | +ifconfig-ipv6 <LOCAL_GATEWAY_IPV6> <LOCAL_GATEWAY_IPV6> |
|
| 29 | +ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 30 | 30 | secret /etc/openvpn/<PEER_NAME>.key |
| 31 | 31 | |
| 32 | 32 | # The secret can also be included inline with the config by |
| ... | ... | @@ -34,7 +34,6 @@ secret /etc/openvpn/<PEER_NAME>.key |
| 34 | 34 | # <secret> |
| 35 | 35 | # ... Key File contents go here ... |
| 36 | 36 | # </secret> |
| 37 | - |
|
| 38 | 37 | ``` |
| 39 | 38 | |
| 40 | 39 | then create a new key and share it with your peer |
| ... | ... | @@ -48,20 +47,20 @@ $ openvpn --genkey --secret /etc/openvpn/<PEER_NAME>.key |
| 48 | 47 | ## peer with fixed ip |
| 49 | 48 | |
| 50 | 49 | ``` |
| 51 | -daemon |
|
| 52 | 50 | proto <PROTO> |
| 53 | 51 | mode p2p |
| 54 | 52 | dev-type tun |
| 55 | 53 | comp-lzo |
| 56 | -dev <INTERFACE_NAME> |
|
| 54 | +dev <INTERFACE_NAME> |
|
| 57 | 55 | persist-key |
| 58 | 56 | persist-tun |
| 59 | 57 | tun-ipv6 |
| 60 | 58 | cipher aes-256-cbc |
| 61 | 59 | resolv-retry infinite |
| 62 | 60 | float |
| 63 | -port <LOCAL_PORT> |
|
| 64 | -ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 61 | +port <LOCAL_PORT> |
|
| 62 | +ifconfig-ipv6 <LOCAL_GATEWAY_IPV6> <LOCAL_GATEWAY_IPV6> |
|
| 63 | +ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 65 | 64 | secret /etc/openvpn/<PEER_NAME>.key |
| 66 | 65 | ``` |
| 67 | 66 | |
| ... | ... | @@ -87,7 +86,8 @@ persist-key |
| 87 | 86 | persist-tun |
| 88 | 87 | cipher aes-256-cbc |
| 89 | 88 | resolv-retry infinite |
| 90 | -ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 89 | +ifconfig <LOCAL_GATEWAY_IP> <REMOTE_GATEWAY_IP> |
|
| 90 | +ifconfig-ipv6 <LOCAL_GATEWAY_IPV6> <LOCAL_GATEWAY_IPV6> |
|
| 91 | 91 | secret /etc/openvpn/<PEER_NAME>.key |
| 92 | 92 | ``` |
| 93 | 93 |