I've been running OpenVPN for years on my OpenWRT configured WNDR3700. My config (cipher BF-CBC) is no longer supported, and I now have a much faster FIOS connection.
I've upgraded my router and installed the current(ish) version of OpenVPN. I'm hoping for a sanity check on my 'new' server.conf file to make sure I'm not missing any features or settings. It has been multiple years since I have looked at this stuff.
Removing the 'new' lines and un-commenting out the 'removed' lines, the file works on my new router using the old keys.
Here's what I intend my 'new' server.conf to look like:
# Existing Lines from 'Old' Config
mode server
port 1194
proto udp
dev tun
client-to-client
comp-lzo
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh2048.pem
server 10.0.0.0 255.255.255.0
push "redirect-gateway def1"
push "dhcp-option DNS 192.168.40.1"
verb 3
keepalive 20 60
log /etc/openvpn/openvpn.log
log-append /etc/openvpn/openvpn.log
# Lines Removed from Old Config
# tls-server
# cipher BF-CBC
# duplicate-cn
# Lines added to New config
cipher AES-256-CBC
ifconfig-pool-persist ipp.txt
tls-auth /etc/openvpn/ta.key 0
user nobody
group nobody
persist-key
persist-tun
mute 20
# Last New Line
explicit-exit-notify 1
Along with connecting from my laptop from the road - which is why I'd like a faster connection - I'm connecting numerous Yealink phones into my phone system remotely using the Yealink's built-in OpenVPN function. I'd like to keep my setup secure, but simple enough to make sure I don't use features that the Yealink phones can't use or would be 'confused' by.
Thanks for looking the file over and pointing out my mistakes.
Andrew
