Server Configuration

### network options
port 1194
proto udp
dev tun
### certificate and key files
ca /etc/openvpn/privnet/ca.crt
cert /etc/openvpn/privnet/server.crt
key /etc/openvpn/privnet/server.key
dh /etc/openvpn/privnet/dh.pem
### (optional) use a shared key to initialize TLS negotiation
tls-auth /etc/openvpn/privnet/shared.key
### VPN subnet
server 172.16.1.0 255.255.255.0
### (optional) make local network behind the VPN server accessible for the VPN clients
#push "route 72.20.12.0 255.255.255.0"
#route-up "route delete -net 172.16.1.0/24"
#route-up "route add -net 172.16.1.0/24 tun0"
#push "route 172.16.1.0 255.255.255.0"
### (optional) make the VPN server a gateway for the internet for the VPN clients
push "redirect-gateway def1"
### (optional) compression (might make your WRT sluggish or not, depending on the model and what you have running...)
push "dhcp-option DNS 4.2.2.1"
push "dhcp-option DNS 4.2.2.2"
comp-lzo
keepalive 10 120
status /tmp/openvpn.status


Client Configuration

client
dev tun
proto udp
remote 72.20.X.X 1194
nobind
### (optional) degrade privileges to this user and group after initialization
#user nobody
#group nogroup
ca ca.crt
cert client.crt
key client.key
dh dh.pem
### (optional) use a shared key to initialize TLS negotiation
tls-auth shared.key
### (optional) compression (use only if the server has it)
comp-lzo