Hello,
I'd like to be able to set up two OpenVPN profiles on my laptop - a 'normal' one, where only traffic destined for our internal network goes over the VPN, and a 'extra secure' one, where all traffic is routed through the VPN.
I want to do this because our VPN isn't on the fastest connection, and most of the time I'm on a network managed by myself, but I'd like to be able to use public wifi securely.
I'm hoping I can simply duplicate my client profile and add in some extra lines or something to force everything to be routed?
Here are my current configurations for posterity. I've stripped out sensitive parts.
server.conf
port 1195
management 127.0.0.1 1195
multihome
proto udp
dev tun110
tls-server
mode server
mute-replay-warnings 1
dh dh1024.pem
ca ca.crt
cert cert.crt
key key.key
keepalive 10 60
server 10.150.10.192 255.255.255.224
push "route 10.150.0.0 255.255.0.0" #Managed VLANs
push "route 192.168.7.0 255.255.255.0" #Access back to office
topology subnet
comp-lzo
status-version 2
status openvpn-vlan110-status.log
ifconfig-pool-persist vlan110-pool.log
verb 3
plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so ovpn.vlan110
username-as-common-name
Client conf
pkcs12 my-name.p12
port 1195
remote xxx.xxx.xxx.xxx
client
dev tun
proto udp
resolv-retry infinite
nobind
ns-cert-type server
pull
auth-user-pass
comp-lzo
