C613-50186-01 Rev B
Command Reference for AR2050V
2776
AlliedWare Plus™ Operating System - Version 5.4.7-1.x
O
PEN
VPN C
OMMANDS
TUNNEL
OPENVPN
CIPHER
tunnel openvpn cipher
Overview
Use this command to configure the data channel encryption cipher for an
OpenVPN tunnel.
Use the
no
variant of this command to set the data channel encryption cipher for
an OpenVPN tunnel to its default value of AES-128.
Syntax
tunnel openvpn cipher {aes128|aes256}
no tunnel openvpn cipher
Default
AES-128
Mode
Interface configuration
Usage
You need to configure the client to use the same setting as the server. To do this,
include one of the following lines in your client’s OpenVPN configuration (.ovpn)
file:
For example, consider a client file tun.ovpn that has the following settings:
To change the client to AES-256, replace the line “cipher AES-128-CBC” with
“cipher AES-256-CBC”.
Parameter
Description
aes128
Use Advanced Encryption Standard symmetric key block cipher
with a 128-bit key as the data channel encryption cipher.
aes256
Use Advanced Encryption Standard symmetric key block cipher
with a 256-bit key as the data channel encryption cipher.
Setting
Line
AES-128
cipher AES-128-CBC
AES-256
cipher AES-256-CBC
# tun.ovpn
client
auth-user-pass
cipher AES-128-CBC
dev tap
proto udp
remote 192.168.1.1
ca c:/users/support/cacert.pem
verb 7