local 192.168.1.101
port 1194
proto udp
dev tun
secret /ffp/etc/openvpn/certs/static.key

ifconfig 10.8.0.1 10.8.0.2

# Use compression on the VPN link
comp-lzo

# Make the link more resistent to connection failures
keepalive 10 60
ping-timer-rem
persist-tun
persist-key

verb 3

remote мой_внешний_белый_ip 1194
dev tun
ifconfig 10.8.0.2 10.8.0.1
secret static.key

# Use compression on the VPN link
comp-lzo

# Make the link more resistent to connection failures
keepalive 10 60
ping-timer-rem
persist-tun
persist-key

echo "1" > /proc/sys/net/ipv4/ip_forward

#!/ffp/bin/sh

# PROVIDE: openvpn
# REQUIRE: LOGIN

. /ffp/etc/ffp.subr

name="openvpn"
command="/ffp/bin/$name"
required_files="/ffp/etc/openvpn/openvpn_config"
openvpn_flags="--daemon --config /ffp/etc/openvpn/openvpn_config"

start_cmd="openvpn_start"
stop_cmd="openvpn_stop"
extra_commands="debug"
debug_cmd="openvpn_debug"

openvpn_start()
{
   echo Starting OpenVPN
   echo "Creating devices..."
   mkdir -p /dev/net
   mknod /dev/net/tun c 10 200 > /dev/null 2>&1

   echo "Loading modules ..."
   insmod /ffp/lib/modules/2.6.12.6-arm1/kernel/drivers/net/tun.ko > /dev/null 2>&1

   proc_start $command
}

openvpn_stop()
{

   echo Stopping OpenVPN
   proc_stop $command

   echo "Removing devices..."
   rm -f /dev/net/tun
   rmdir  /dev/net > /dev/null 2>&1
   sleep 3

   echo "Unloading modules ..."
   rmmod tun
}

openvpn_debug()
{
   openvpn_flags="--config /ffp/etc/openvpn/openvpn_config"
   echo Starting OpenVPN

   echo "Creating devices..."
   mkdir -p /dev/net
   mknod /dev/net/tun c 10 200 > /dev/null 1>&1

   echo "Loading modules ..."
   insmod /ffp/lib/modules/2.6.12.6-arm1/kernel/drivers/net/tun.ko

   proc_start $command
}

run_rc_command "$1"

echo 1 > /proc/sys/net/ipv4/ip_forward

insmod /ffp/lib/modules/2.6.12.6-arm1/kernel/drivers/net/tun.ko

#!/ffp/bin/sh

# PROVIDE: openvpn
# REQUIRE: LOGIN

. /ffp/etc/ffp.subr

name="openvpn"
command="/ffp/bin/$name"
required_files="/ffp/etc/openvpn/openvpn_config"
openvpn_flags="--daemon --config /ffp/etc/openvpn/openvpn_config"

start_cmd="openvpn_start"
stop_cmd="openvpn_stop"
extra_commands="debug"
debug_cmd="openvpn_debug"

openvpn_start()
{
   echo Starting OpenVPN
   echo "Creating devices..."
   mkdir -p /dev/net
   mknod /dev/net/tun c 10 200 > /dev/null 2>&1

   echo "Loading modules ..."
   insmod /ffp/lib/modules/2.6.12.6-arm1/kernel/drivers/net/tun.ko > /dev/null 2>&1

   openvpn --mktun --dev tap0
   #brctl addif br0 tap0
   ifconfig tap0 0.0.0.0 promisc up

   proc_start $command
}

openvpn_stop()
{

   echo Stopping OpenVPN
   proc_stop $command

   echo "Removing devices..."
   rm -f /dev/net/tun
   rmdir  /dev/net > /dev/null 2>&1
   sleep 3

   echo "Unloading modules ..."
   rmmod tun
}

openvpn_debug()
{
   openvpn_flags="--config /ffp/etc/openvpn/openvpn_config"
   echo Starting OpenVPN

   echo "Creating devices..."
   mkdir -p /dev/net
   mknod /dev/net/tun c 10 200 > /dev/null 1>&1

   echo "Loading modules ..."
   insmod /ffp/lib/modules/2.6.12.6-arm1/kernel/drivers/net/tun.ko

   openvpn --mktun --dev tap0
   #brctl addif br0 tap0
   ifconfig tap0 0.0.0.0 promisc up

   proc_start $command
}

run_rc_command "$1"

# Tunnel options
mode server       # Set OpenVPN major mode
proto udp         # Setup the protocol (server)
port 443         # TCP/UDP port number
dev tap0          # TUN/TAP virtual network device
keepalive 15 60   # Simplify the expression of --ping
daemon            # Become a daemon after all initialization
verb 3            # Set output verbosity to n
comp-lzo          # Use fast LZO compression

# OpenVPN server mode options
client-to-client  # tells OpenVPN to internally route client-to-client traffic
duplicate-cn      # Allow multiple clients with the same common name

# TLS Mode Options
tls-server        # Enable TLS and assume server role during TLS handshake
ca /ffp/etc/openvpn/certs/ca.crt         # Certificate authority (CA) file
dh /ffp/etc/openvpn/certs/dh1024.pem     # File containing Diffie Hellman parameters
cert /ffp/etc/openvpn/certs/server.crt   # Local peers signed certificate
key /ffp/etc/openvpn/certs/server.key    # Local peers private key

# Set routing
echo 1 > /proc/sys/net/ipv4/ip_forward

client
dev tap
proto udp
remote мой_внешний_белый_ip 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ca.crt
cert client1.crt
key client1.key
ns-cert-type server
comp-lzo
verb 3

#brctl addif br0 tap0