userdoc:tt_openvpn_server

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
userdoc:tt_openvpn_server [2018/10/14 10:42]
abelbeck [Windows Client Configuration]
userdoc:tt_openvpn_server [2018/12/01 12:26] (current)
mkeuter
Line 55: Line 55:
   * Extra TLS-Auth:  Enable a kind of "HMAC  firewall" on OpenVPN's TCP/UDP port, where TLS control channel packets bearing an incorrect HMAC signature can be dropped immediately without response.  "Yes" is a good choice if **all** clients support it. //[client.ovpn]//   * Extra TLS-Auth:  Enable a kind of "HMAC  firewall" on OpenVPN's TCP/UDP port, where TLS control channel packets bearing an incorrect HMAC signature can be dropped immediately without response.  "Yes" is a good choice if **all** clients support it. //[client.ovpn]//
  
-{{:userdoc:ovpn-server-firewall.jpg?nolink|}}+{{:userdoc:ovpn-server-firewall.png?nolink|}}
  
   * External Hosts:  Define a space separated list of allowed IPv4/IPv6 addresses via the external interface. The external firewall rules are automatically created by the [[userdoc:tt_firewall_plugins#openvpn-server|openvpn-server plugin]] .  The firewall must be enabled, see the "Enable Firewall" section below for more info.   * External Hosts:  Define a space separated list of allowed IPv4/IPv6 addresses via the external interface. The external firewall rules are automatically created by the [[userdoc:tt_firewall_plugins#openvpn-server|openvpn-server plugin]] .  The firewall must be enabled, see the "Enable Firewall" section below for more info.
 +  * Client Isolation:  Choose to "Pass" or "Deny" Client->Client traffic. "Deny" isolates connected clients, blocking access with each other. //(AstLinux 1.3.5 and later)//
  
 !!Tip ->!! Allow any external IPv4/IPv6 address by defining "External Hosts:" to "0/0". !!Tip ->!! Allow any external IPv4/IPv6 address by defining "External Hosts:" to "0/0".
Line 217: Line 218:
   C:\Users\<USER>\OpenVPN\config\   C:\Users\<USER>\OpenVPN\config\
  
-Or more simply, find the OpenVPN task in the system tray, right-click on it:+Or more simply, find the OpenVPN task in the system tray, right-click on it, select "Import file..." and select your named **openvpn-cert-key** format ''client.ovpn'' file.
  
 {{:userdoc:ovpn-win-gui-import.png?nolink|}} {{:userdoc:ovpn-win-gui-import.png?nolink|}}
  
-Provided that all goes well, you are ready to connect to your OpenVPN server, right-click on the OpenVPN task in the system tray:+Next, you are ready to connect to your OpenVPN server, right-click on the OpenVPN task in the system tray:
  
 {{:userdoc:ovpn-win-gui-task.png?nolink|}} {{:userdoc:ovpn-win-gui-task.png?nolink|}}
Line 228: Line 229:
  
 {{:userdoc:ovpn-win-gui-connect.png?nolink|}} {{:userdoc:ovpn-win-gui-connect.png?nolink|}}
- 
  • userdoc/tt_openvpn_server.1539531731.txt.gz
  • Last modified: 2018/10/14 10:42
  • by abelbeck