Using Unsupported Openvpn Options - Brocade Communications Systems 5600 Reference Manual

Using unsupported OpenVPN options

OpenVPN has over two hundred options, not all of which are feasible to support in the Brocade
vRouter. At the same time, the administrator of a particular environment might require OpenVPN
options not supported by the Brocade vRouter configuration. For these cases, the Brocade vRouter
provides the openvpn-option configuration attribute; this attribute allows any OpenVPN option to be
specified, as shown in the following example.
The openvpn-option configuration attribute
interfaces {
}
The text of the openvpn-option attribute is passed directly (without any validation) to OpenVPN when
OpenVPN is invoked, as if the text had been typed on the OpenVPN command line by the user.
Therefore, multiple options can be entered together as shown in the following example.
To configure this example, perform the following steps in configuration mode.
TABLE 15
Step
Create the vtun0 configuration node.
Enter configuration commands.
Set the desired OpenVPN options.
Enter configuration commands.
Commit the change.
Show the OpenVPN configuration.
It is also possible to enter the commands separately as shown in the example that follows.
To configure this example, perform the following steps in configuration mode.
TABLE 16
Step
Create the vtun0 configuration node.
Enter configuration commands.
Set another desired OpenVPN option.
Set a desired OpenVPN option.
Brocade 5600 vRouter OpenVPN Reference Guide
53-1003719-03
openvpn if_name{
openvpn-option options
}
Entering multiple OpenVPN options using openvpn-option
Entering multiple OpenVPN options through multiple commands using openvpn-option
Command
vyatta@V1# set interfaces openvpn vtun0
...
vyatta@V1# set interfaces openvpn vtun0 openvpn-option
"--verb 5 --secret /config/auth/secret 1"
...
vyatta@V1# commit
vyatta@V1# show interfaces openvpn vtun0
...
openvpn-option "--verb 5 --secret /config/auth/secret 1"
...
Command
vyatta@V1# set interfaces openvpn vtun0
...
vyatta@V1# set interfaces openvpn vtun0 openvpn-option
"--secret /config/auth/secret 1"
vyatta@V1# set interfaces openvpn vtun0 openvpn-option
"--verb 5"
Using unsupported OpenVPN options
37