Skip to content

Basic OpenVPN Server and Client Configuration

by Tom B. on May 9th, 2011

Over the last few weeks we’ve been discussing OpenVPN, the best free VPN solution out there. I’ve looked at and tried to explain each configuration parameter, both Server and Client. This week I’m posting a basic configuration which should have you up and running within 15 minutes. I encourage you to try it, and if you have any questions leave a comment and I’ll try to help as much as I can.

On the flip side there are a number of really good books on OpenVPN, from beginner to advanced. Packt Publishing comes to mind, they have really inexpensive PDF versions, of which I’ve read two. In fact they’ve recently released the 3rd and newest addition to their OpenVPN lineup. I’ll post a link shortly.

Good luck and let me know how you made out.

Server Configuration

proto udp

port 1194

Dev Tun

ca ca.crt

cert servercertificate.crt

key serverprivatekey.key

dh dh1024.pem

server 192.168.x.x 255.255.255.0

ifconfig-pool-persist client-pool.txt

keepalive 10 120

tls-auth ta.key 0

cipher AES-128-CBC

comp-lzo

max-clients 1

user nobody

group nobody

persist-key

persist.tun

status openvpn-status.log

log openvpn-log.log

log-append openvpn-append-log.log

verb 4

mute 20

Client Configuration

client

dev Tun

proto udp

remote my-vpn-server-ip 1194

nobind

user nobody

group nobody

persist-key

persist.tun

ca ca.crt

cert clientcertificate.crt

key clientprivatekey.key

tls-auth ta.key 1

cipher AES-128-CBC

comp-lzo

verb 4

Mute 20

From → Crushing Packets

3 Comments
  1. I was wondering if you ever considered changing the page layout of your site? Its very well written; I love what youve got to say. But maybe you could a little more in the way of content so people could connect with it better. Youve got an awful lot of text for only having 1 or two images. Maybe you could space it out better?

  2. Nice post mate, I love your blog, thanks for sharing it

  3. Awesome writing style!

Leave a Reply

Note: XHTML is allowed. Your email address will never be published.

Subscribe to this comment feed via RSS