Benutzer:MathiasMahnke/OpenVPN-IPv6: Unterschied zwischen den Versionen
Aus Opennet
| Zeile 1: | Zeile 1: | ||
* Beschreibung IPv6 Patches: http://www.irrigacion.gov.ar/juanjo/openvpn/READMe.txt | * Beschreibung IPv6 Patches: http://www.irrigacion.gov.ar/juanjo/openvpn/READMe.txt | ||
* Anpassung an OpenVPN 2.1 RC15: http://www.opennet-initiative.de/download/openvpn-2.1_rc15-udp6.patch | * Anpassung an OpenVPN 2.1 RC15: http://www.opennet-initiative.de/download/openvpn-2.1_rc15-udp6.patch | ||
| + | |||
| + | Server: | ||
| + | port 1600 | ||
| + | proto udp6 | ||
| + | dev tun | ||
| + | float | ||
| + | mode server | ||
| + | tls-server | ||
| + | server 10.3.0.0 255.255.0.0 | ||
| + | ca /etc/openvpn/ca.crt | ||
| + | cert /etc/openvpn/ipv6-server.crt | ||
| + | key /etc/openvpn/ipv6-server.key | ||
| + | dh /etc/openvpn/dh2048.pem | ||
| + | keepalive 10 120 | ||
| + | #comp-lzo | ||
| + | max-clients 1000 | ||
| + | |||
| + | Client: | ||
| + | client | ||
| + | dev tun | ||
| + | proto udp6 | ||
| + | ns-cert-type server | ||
| + | remote <ipv6-server-addr> 1600 | ||
| + | nobind | ||
| + | user nobody | ||
| + | group nobody | ||
| + | persist-key | ||
| + | persist-tun | ||
| + | ca path/opennet-ca.crt | ||
| + | cert path/on_mobile.crt | ||
| + | key path/on_mobile.key | ||
| + | #comp-lzo | ||
| + | #route 192.168.0.0 255.255.0.0 net_gateway | ||
| + | #redirect-gateway | ||
Version vom 9. Februar 2009, 22:54 Uhr
- Beschreibung IPv6 Patches: http://www.irrigacion.gov.ar/juanjo/openvpn/READMe.txt
- Anpassung an OpenVPN 2.1 RC15: http://www.opennet-initiative.de/download/openvpn-2.1_rc15-udp6.patch
Server:
port 1600 proto udp6 dev tun float mode server tls-server server 10.3.0.0 255.255.0.0 ca /etc/openvpn/ca.crt cert /etc/openvpn/ipv6-server.crt key /etc/openvpn/ipv6-server.key dh /etc/openvpn/dh2048.pem keepalive 10 120 #comp-lzo max-clients 1000
Client:
client dev tun proto udp6 ns-cert-type server remote <ipv6-server-addr> 1600 nobind user nobody group nobody persist-key persist-tun ca path/opennet-ca.crt cert path/on_mobile.crt key path/on_mobile.key #comp-lzo #route 192.168.0.0 255.255.0.0 net_gateway #redirect-gateway
