Hi
I have the same setup for client who use our vpn or connect on our Visitor wired ports.
Currently for the wired port people I have a dynamic script that looks at the client source ip and changes the routes pushed
What I would like to do now is change the encryption to null and compression to null as well for certain users. We control the wifi and are okay with it being un encrypted. But I want to use the same setup for when they are on the internet.
Is this possible
From my rather limited knowledge of openvpn
there are 2 channels
command and data ???
These are the options I have to play with
auth
cipher
tls-version-min version
tls-version-max
local 10.172.203.29
server 10.172.210.0 255.255.255.128
server-ipv6 2002:ca4a:2000:ACD2:4000::/66
port 2443
proto udp
dev tun
topology subnet
ifconfig-pool-persist /etc/openvpn/ip-pool.txt
txqueuelen 500
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key # This file should be kept secret
dh /etc/openvpn/dh2048.pem
crl-verify /etc/openvpn/client-crl.pem
tls-verify /etc/openvpn/verifyCert.sh
tls-auth /etc/openvpn/ta.key 0 # This file is secret
client-config-dir ccd
push "route-ipv6 2001::/16"
push "route-ipv6 2002::/16"
push "route-ipv6 0::/1"
push "route-ipv6 8000::/1"
push "redirect-gateway def1"
push "dhcp-option DNS 10.32.20.102"
push "dhcp-option DNS 10.32.20.100"
push "dhcp-option DNS 10.32.69.11"
push "comp-lzo"
keepalive 15 45
cipher BF-CBC # Blowfish (default)
comp-lzo
max-clients 100
user nobody
group nobody
persist-key
persist-tun
status /etc/openvpn/status-udp.log
verb 3
mute 10
management localhost 2443
script-security 2
client-connect /etc/openvpn/ConnectClientFW.sh
client-disconnect /etc/openvpn/DisConnectClientFW.sh
learn-address /etc/openvpn/set-route.sh
client
dev tun
resolv-retry infinite
nobind
remote-cert-tls server
tls-client
ca client-ca.crt
tls-auth ta.key 1
cryptoapicert "SUBJ: vpn"
verify-x509-name 'C=AU,CN=xxxxx'
comp-lzo
verb 3
keepalive 5 15
auth-retry nointeract
socket-flags TCP_NODELAY
<connection>
remote vpn.abc.com 2443 udp
</connection>
# Try TCP next but max of 5 times
<connection>
# retry every 1 sec
connect-retry 1
# time out every 10s
connect-timeout 10
# keep try forever
#connect-retry-max infinite
connect-retry-max 5
remote vpn.abc.com 443 tcp
# only try this for 5 times
</connection>
