diff --git a/VM_VPN_GATEWAY.sh b/VM_VPN_GATEWAY.sh index 23dbacc..f0f7402 100644 --- a/VM_VPN_GATEWAY.sh +++ b/VM_VPN_GATEWAY.sh @@ -22,7 +22,7 @@ if_dentro="enp0s9" ip_dentro="10.60.0.3" mega_tunel="tun0" -ip_mega_tunel="10.8.0.1/24" +ip_mega_tunel="10.8.0.0/24" # --- interfaces --- # ifconfig $if_fora $ip_fora netmask 255.255.255.0 diff --git a/client.conf b/client.conf index 14c8150..e1e43fe 100644 --- a/client.conf +++ b/client.conf @@ -10,8 +10,9 @@ ca /etc/openvpn/client/ca.crt cert /etc/openvpn/client/user.crt key /etc/openvpn/client/user.key -# 2FA -auth-user-pass +# auth cipher AES-256-GCM auth SHA256 + +auth-user-pass tls-auth /etc/openvpn/client/ta.key 1 diff --git a/vpn.conf b/vpn.conf index 46e5e2d..4665658 100644 --- a/vpn.conf +++ b/vpn.conf @@ -8,8 +8,13 @@ ca /etc/openvpn/server/ca.crt cert /etc/openvpn/server/vpn.crt key /etc/openvpn/server/vpn.key dh dh2048.pem -server 10.60.0.0 255.255.255.0 +server 10.8.0.0 255.255.255.0 verb 4 + +# auth +cipher AES-256-GCM +auth SHA256 + plugin /usr/lib64/openvpn/plugins/openvpn-plugin-auth-pam.so openvpn tls-auth /etc/openvpn/server/ta.key 0