This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revisionNext revision | Previous revision | ||
vpn-server [2024/11/05 23:24] – [Routing Notes] -Condense hogwild | vpn-server [2024/11/24 10:52] (current) – CB -> CBC petervdm | ||
---|---|---|---|
Line 13: | Line 13: | ||
\\ | \\ | ||
- | However, there are still differences between versions. For example, clients and servers may be configured on different versions. Encryption algorithms may be negotiated differently among versions. FreshTomato 2024.3 includes OpenVPN 2.6.12. For details, see the OpenVPN documentation/ | + | However, there are still differences between versions. For example, clients and servers may be configured on different versions. Encryption algorithms may be negotiated differently among versions. FreshTomato 2024.3 includes OpenVPN 2.6.12. For details, see the OpenVPN documentation/ |
\\ | \\ | ||
Line 351: | Line 351: | ||
* AES-128-GCM | * AES-128-GCM | ||
* AES-256-GCM | * AES-256-GCM | ||
- | * AES-128-CB | + | * AES-128-CBC |
* AES-256-CBC | * AES-256-CBC | ||
Line 448: | Line 448: | ||
Here, you can specify a custom configuration for the OpenVPN server to use. | Here, you can specify a custom configuration for the OpenVPN server to use. | ||
- | For details about valid custom parameters, please see: \\ [[https:// | + | For details about valid custom parameters, please see: \\ [[https:// |
Line 621: | Line 621: | ||
push "route 192.168.1.0 255.255.255.0" | push "route 192.168.1.0 255.255.255.0" | ||
</ | </ | ||
+ | | ||
+ | You must then restart both the OpenVPN server and the client.\\ | ||
- | You must then restart both the OpenVPN | + | This will cause the server |
- | Now, when the client connects, the server tells it to route all traffic for IP addresses in scope 192.168.1.XXX through | + | This example describes a basic setup. The setup is almost complete. The only thing left is to add the appropriate routes, as with normal routing. |
- | This example describes a basic setup. When we now start on the routing, the setup is mostly complete. All you need now is to add the appropriate routes, just as you would for normal routing. | + | You also must ensure return routes. Just because a VPN client can access a host behind |
- | You also must consider return routes. Just because | + | For a more detailed example, see the%% %%Using routing%% %%section in the Bridging and routing wiki page. |
- | For a more detailed example of using routing, see the%% %%Using routing%% %%section in the ' | ||
- | + | ==== Routing all Traffic | |
- | ==== Routing all Traffic | + | |
You can route all network traffic over the VPN. The configuration for this is fairly simple. However, you'll need to learn how to configure NAT on your VPN server for the virtual TUN adapter. | You can route all network traffic over the VPN. The configuration for this is fairly simple. However, you'll need to learn how to configure NAT on your VPN server for the virtual TUN adapter. | ||
Line 666: | Line 666: | ||
==== About IPv6 ==== | ==== About IPv6 ==== | ||
- | OpenVPN v2.3 and later support IPv6. Setting up IPv6 in a VPN is similar to the IPv4 examples | + | OpenVPN v2.3 and later support IPv6. Configuring |
\\ | \\ | ||
Line 682: | Line 682: | ||
\\ | \\ | ||
- | You can use the // | + | You can use the // |
+ | |||
+ | \\ | ||
+ | |||
+ | The syntax is similar: | ||
\\ | \\ |