28 lines
685 B
Django/Jinja
28 lines
685 B
Django/Jinja
dev tun
|
|
port 1194
|
|
proto tcp-server
|
|
mode server
|
|
tls-server
|
|
|
|
ca ca.crt
|
|
cert /etc/pki/tls/certs/openvpn.cer
|
|
key /etc/pki/tls/private/openvpn.key
|
|
dh dh2048.pem
|
|
|
|
topology subnet
|
|
push "topology subnet"
|
|
ifconfig 172.30.0.209 255.255.255.240
|
|
ifconfig-pool 172.30.0.216 172.30.0.222
|
|
{% for net in firemon_networks %}
|
|
route {{ net|ipaddr('network') }} {{ net|ipaddr('netmask') }} 172.30.0.210
|
|
{% endfor %}
|
|
push "route 172.30.0.0 255.255.255.192 172.30.0.209"
|
|
push "route 172.31.0.0 255.255.255.224 172.30.0.209"
|
|
push "route 172.31.0.64 255.255.255.240 172.30.0.209"
|
|
push "dhcp-option DNS 172.30.0.4"
|
|
push "dhcp-option DNS 172.30.0.3"
|
|
client-to-client
|
|
client-config-dir clients
|
|
|
|
keepalive 10 120
|