local 192.168.222.22 port 1234 proto tcp dev vpn dev-type tap ca /etc/openvpn/easy-rsa/keys/ca.crt cert /etc/openvpn/easy-rsa/keys/server.crt key /etc/openvpn/easy-rsa/keys/server.key # This file should be kept secret dh /etc/openvpn/easy-rsa/keys/dh2048.pem tls-auth /etc/openvpn/easy-rsa/keys/ta.key 0 #this will assign connecting clients address between the range of 100 and 150 server-bridge 192.168.222.22 255.255.254.0 192.168.222.100 192.168.222.111 #this will allow for people to get the same IP address after a reconnect ifconfig-pool-persist /etc/openvpn/ipp.txt keepalive 10 120 #defines time-out for client-connections cipher AES-256-CBC comp-lzo max-clients 15 user nobody group nobody persist-key # do not re-read keyfiles while ping-restart persist-tun # do not close and reopen virtual if while ping-restart status /tmp/openvpn-status.log log-append /var/log/openvpn.log client-to-client # enables communication between clients verb 3 mode server # this is the server tls-server # we need a preshared key