Tripp Lite B092-016 Owner's Manual page 63

Chapter 4: Serial Port, Device and User Configuration
The Windows client/server configuration file options are:
Options
#description:
Client
server
proto udp
proto tcp
mssfix <max. size>
verb <level>
dev tun
dev tap
remote <host>
Port
Keepalive
http-proxy <proxy server>
<proxy port #>
ca <file name>
cert <file name>
key <file name>
dh <file name>
Nobind
persist-key
persist-tun
cipher BF-CBC Blowfish
(default)
cipher AES-128-CBC AES
cipher DES-EDE3-CBC
Triple-DES
comp-lzo
syslog
Description
This is a comment describing the configuration.
Comment lines start with a '#' and are ignored by OpenVPN.
Specify whether this will be a client or server configuration file. In the server configuration file,
define the IP address pool and netmask. For example, server 10.100.10.0 255.255.255.0
Set the protocol to UDP or TCP . The client and server must use the same settings.
Mssfix sets the maximum size of the packet. This is only useful for UDP if problems occur.
Set log file verbosity level. Log verbosity level can be set from 0 (minimum) to 15 (maximum).
For example,
0 = silent except for fatal errors
3 = medium output, good for general usage
5 = helps with debugging connection problems
9 = extremely verbose, excellent for troubleshooting
Select 'dev tun' to create a routed IP tunnel or 'dev tap' to create an Ethernet tunnel. The
client and server must use the same settings.
The hostname/IP of OpenVPN server when operating as a client. Enter either the DNS
hostname or the static IP address of the server.
The UDP/TCP port of the server.
Keepalive uses ping to keep the OpenVPN session alive. 'Keepalive 10 120' pings every 10
seconds and assumes the remote peer is down if no ping has been received over a 120
second time period.
If a proxy is required to access the server, enter the proxy server DNS name or IP and port
number.
Enter the CA certificate file name and location. The same CA certificate file can be used by the
server and all clients.
Note: Ensure each '\' in the directory path is replaced with ' \\'. For example, c:\openvpnkeys\
ca.crt will become c:\\openvpnkeys\\ca.crt
Enter the client's or servers's certificate file name and location. Each client should have its
own certificate and key files.Note: Ensure each '\' in the directory path is replaced with ' \\'.
Enter the file name and location of the client's or server's key. Each client should have its own
certificate and key files.
Note: Ensure each '\' in the directory path is replaced with ' \\'.
This is used by the server only.
Enter the path to the key with the Diffie-Hellman parameters.
'Nobind' is used when clients do not need to bind to a local address or specific local port
number. This is the case in most client configurations.
This option prevents the reloading of keys across restarts.
This option prevents the close and reopen of TUN/TAP devices across restarts.
Select a cryptographic cipher. The client and server must use the same settings.
Enable compression on the OpenVPN link. This must be enabled on both the client and the
server.
By default, logs are located in syslog or, if running as a service on Window, in \Program Files\
OpenVPN\log directory.
63