### network options port 1194 proto udp dev tun ### certificate and key files ca /etc/openvpn/privnet/ca.crt cert /etc/openvpn/privnet/server.crt key /etc/openvpn/privnet/server.key dh /etc/openvpn/privnet/dh.pem ### (optional) use a shared key to initialize TLS negotiation tls-auth /etc/openvpn/privnet/shared.key ### VPN subnet server 172.16.1.0 255.255.255.0 ### (optional) make local network behind the VPN server accessible for the VPN clients #push "route 172.16.1.0 255.255.255.0" ### (optional) make the VPN server a gateway for the internet for the VPN clients push "redirect-gateway def1" ### (optional) compression (might make your WRT sluggish or not, depending on the model and what you have running...) push "dhcp-option DNS 4.2.2.1" push "dhcp-option DNS 4.2.2.2" comp-lzo keepalive 10 120 status /tmp/openvpn.status