Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Book Image

OpenVPN: Building and Integrating Virtual Private Networks

Overview of this book

OpenVPN is a powerful, open source SSL VPN application. It can secure site-to-site connections, WiFi and enterprise-scale remote connections. While being a full-featured VPN solution, OpenVPN is easy to use and does not suffer from the complexity that characterizes other IPSec VPN implementations. It uses the secure and stable TLS/SSL mechanisms for authentication and encryption. This book is an easy introduction to this popular VPN application. After introducing the basics of security and VPN, the book moves on to cover using OpenVPN, from installing it on various platforms, through configuring basic tunnels, to more advanced features, such as using the application with firewalls, routers, proxy servers, and OpenVPN scripting. While providing only necessary theoretical background, the book takes a practical approach, presenting plenty of examples.
Table of Contents (17 chapters)
OpenVPN
Credits
About the Author
About the Reviewers
Preface
Index

Overview of OpenVPN Parameters


The table in the following section is a detailed list of all parameters OpenVPN offers concerning basic tunnel options. They can be used both at the command line and in configuration files.

General Tunnel Options

Most of these options are used to determine the way in which openvpn connects to the tunnel partner and how it deals with connections not responding or changing.

Parameter

Options

Function

Usage

local

<host>

Binds local service to the address of <host>. Useful if you want openvpn to run only on one interface of a host, with multiple home sites.

--local 192.168.0.50

remote

<host>

Connects to the host. IP or DNS are equivalent, DynDNS is possible.

--remote feilner-it.net

remote-random

Simple load balancing, Specify multiple --remote addresses and openvpn will randomly connect to one of them.

--remote-random

float

Allows the remote VPN partner to change the remote IP address (e.g. with DynDNS).

--float

ipchange

...