FOR TIPS, gUIDES & TUTORIALS

subscribe to our Youtube

GO TO YOUTUBE

14455 questions

17168 answers

28195 comments

0 members

We are migrating to our new platform at https://community.teltonika.lt. Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
711 views 0 comments
by

When setting up ovpn client with configuration file (created on a QNAP NAS) the RUT240 does show "not available" for TUN/TAP, protocol and port.

Config file seems to be OK.

client

dev tun

script-security 3

remote xx.xxx.xxx.xx 1194

resolv-retry infinite

nobind

auth-nocache

auth-user-pass

remote-cert-tls server

reneg-sec 0

cipher AES-128-CBC

tls-cipher TLS-ECDHE-RSA-WITH-AES-256-GCM-SHA384:TLS-ECDHE-ECDSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-GCM-SHA384:TLS-DHE-RSA-WITH-AES-256-CBC-SHA256:TLS-DHE-RSA-WITH-AES-256-CBC-SHA:TLS-DHE-RSA-WITH-AES-128-CBC-SHA

comp-lzo

proto udp

explicit-exit-notify 1

<ca>

-----BEGIN CERTIFICATE-----

1 Answer

0 votes
by anonymous
Hello,

We highly recommend you to generate certificates by using OpenVPN GUI. You can find more details here:

https://openvpn.net/community-resources/setting-up-your-own-certificate-authority-ca/

Regarding the script itself, here is an example of a OpenVPN client file:

client
dev tun
proto udp
remote 81.11.11.11 11941
resolv-retry infinite
nobind
persist-key
persist-tun
remote-cert-tls server
tls-version-min 1.2
verify-x509-name server_4Dxxx7G3xxxgoxxxs name
cipher AES-256-CBC
auth SHA256
auth-nocache
verb 3
<ca>
-----BEGIN CERTIFICATE-----
Paste here
-----END CERTIFICATE-----
</ca>
<cert>
-----BEGIN CERTIFICATE-----
Paste here
-----END CERTIFICATE-----
</cert>
<key>
-----BEGIN PRIVATE KEY-----
Paste here
-----END PRIVATE KEY-----
</key>
<tls-crypt>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
Paste here
-----END OpenVPN Static key V1-----
</tls-crypt>