Novell LINUX ENTERPRISE DESKTOP 11, Manual, Page: 206 / 450

Example 16.2 VPN Client Configuration File
# /etc/openvpn/client.conf
client
❶
dev tun
❷
proto udp
❸
remote IP_OR_HOSTNAME 1194
❹
resolv-retry infinite
nobind
# Privleges
❺
user nobody
group nobody
# Try to preserve some state across restarts.
persist-key
persist-tun
# Security
❻
ca ssl/ca.crt
cert ssl/client.crt
key
ssl/client.key
comp-lzo
❼
❶
We have to specify that this machine is a client.
❷
The network device. Both clients and server must use the same device.
❸
The protocol. Use the same settings as on the server.
❹
Replace the placeholder
IP_OR_HOSTNAME
with the respective hostname or IP
address of your VPN server. After the hostname the port of the server is given.
You can have multiple lines of
remote
entries pointing to different VPN servers.
This is useful for load balancing between different VPN servers.
❺
For security reasons it is a good idea to run the OpenVPN daemon with reduced
privileges. For this reason the group and user
nobody
is used.
❻ Contains the client files. For security reasons, it is better to have a separate file
pair for each client.
❼
Turns compresson on. Use it only when the server has this parameter switched
on, as well.
192 Security Guide