## Sample OpenVPN configuration file for# home using SSL/TLS mode and RSA certificates/keys.## '#' or ';' may be used to delimit comments.# Use a dynamic tun device.# For Linux 2.2 or non-Linux OSes,# you may want to use an explicit# unit number such as "tun1".# OpenVPN also supports virtual# ethernet "tap" devices.dev tun# Our OpenVPN peer is the office gateway.remote 1.2.3.4# 10.1.0.2 is our local VPN endpoint (home).# 10.1.0.1 is our remote VPN endpoint (office).ifconfig 10.1.0.2 10.1.0.1# Our up script will establish routes# once the VPN is alive.up ./home.up# In SSL/TLS key exchange, Office will# assume server role and Home# will assume client role.tls-client# Certificate Authority fileca my-ca.crt# Our certificate/public keycert home.crt# Our private keykey home.key# OpenVPN uses UDP port 5000 by default.# Each OpenVPN tunnel must use# a different port number.# lport or rport can be used# to denote different ports# for local and remote.; port 5000# Downgrade UID and GID to# "nobody" after initialization# for extra security.; user nobody; group nobody# If you built OpenVPN with# LZO compression, uncomment# out the following line.; comp-lzo# Send a UDP ping to remote once# every 15 seconds to keep# stateful firewall connection# alive.  Uncomment this# out if you are using a stateful# firewall.; ping 15# Uncomment this section for a more reliable detection when a system# loses its connection.  For example, dial-ups or laptops that# travel to other locations.; ping 15; ping-restart 45; ping-timer-rem; persist-tun; persist-key# Verbosity level.# 0 -- quiet except for fatal errors.# 1 -- mostly quiet, but display non-fatal network errors.# 3 -- medium output, good for normal operation.# 9 -- verbose, good for troubleshootingverb 3